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Telecom Consolidation 
Raises Concerns for 


Users expect decreased competition, worry 
about possible impact customer service 


MATT HAMBLEN 
Network managers are bracing 
for changes amid the merger 
frenzy the telecommunica- 
tions industry, which intensi- 
fied last week with SBC Com- 
munications Inc.’s agreement 
buy AT&T Corp. and re- 
ports that Qwest Communica- 
tions International Inc. was 
talks gobble MCI Inc. 

the long term, the ongo- 
ing consolidation will likely 
reduce the choices that corpo- 


rate users have when they put 
their network services con- 
tracts out for bid, some users 
and analysts said. 

But several AT&T cus- 
tomers noted that their imme- 
diate concerns are making 
sure that SBC honors their 
contracts and finding out how 
proposed layoffs more than 
12,000 workers over the next 
year will alter the account 
teams they rely upon set 

Telecom, page 


Sun through electron- 
Sun Plans trading market. 
Corporate users 
Offer Hourly search computing time, 
Rates CPUs well speculators, 
able bid available 
CPU hours through Archi- 
pelago Holdings Inc., 
Arguing that computing stock exchange. For exam- Gov. Mike Huckabee con- 
electric power, Sun 10,000 CPU hours econ ing formance-based budgeting 


Microsystems Inc. 
last week said 


through the new Sun 
compute utility 


Says third-party tool isn’t working; lawsuit 


tocl will turned off 
yet undetermined time. 


will allow users plan and then dis- continues against SAP over initial software The application was 
buy CPU cycles covers that needs part the state’s ERP back- 
hourly basis, ei- just 8,000 could sell MARC SONGINI ing application delivered bone, known the Arkansas 
ther directly from Sun, page The state Arkansas SAP failed work prom- Administrative Statewide In- 


ised and that the state’s core 
system based SAP’s 
R/3 software didn’t meet 
specifications for accessibili- 
handicapped users. 


the verge unplugging 
balky portion budgeting 
application written 
third-party software develop- 
er, move that connected 


formation System. AASIS 
went live July 2001 and 
built primarily around R/3. 
Two state officials agreed 


that other than the issues 


SHERI The lawsuit, filed the For more coverage ERP been successful, despite sig- 
PROQUEST Circuit Court Pulaski applications, our Web site: nificant cost overruns. 
County, Ark., four years ago, QuickLink k2000 The state currently puts 
alleges that initial budget- rkansas, page 
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Make name for yourself 
with Windows Server System. 


Microsoft 


Your potential. Our passion.” 


Microsoft Windows Server System makes easier for 
golf club maker PING manage the infrastructure 
serving their 400 end users. how: using 
Windows Server 2003 with Active PING 
now centrally manages all its servers, desktops, 
and end users from one location. This cut annual 
administrative time 800 hours. Time that can now 
spent developing new ways support customers, 
partners, and employees. Software easier 
manage software that helps you more with less. 
Get the full PING story microsoft.com/wssystem 


Dave Chacon 
Manager, Technical Services, PING 


“Instead putting out fires, now focus 
ways can deploy new technologies 
that benefit our customer 


Windows Server System™ includes: 


Server OS 


Operations Infrastructure 


Application Infrastructure 


Information Work Infrastructure 


Windows Server™ 

Systems Management Server 
Operations Manager 

Internet Security & Acceleration Server 
Windows Storage Server 

SQL Server™ 

BizTalk’ Server 

Commerce Server 

Host Integration Server 
Exchange Server 

Content Management Server 
Office SharePoint™ Portal Server 


Office Live Communications Server 
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inspired the human side data. Data mobility more than moving 1’s and around. 

about letting people work how and where they want to, even where the waves are. why 

durable Hitachi hard disk drives are the industry choice for PDAs, laptops, and alike. From 
smallest Microdrive® the largest SAN solution, Data Storage from Hitachi. 


Inspire the Next 
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Command Control 


the Technology section: turn ragtag bunch 
security assets into elite defensive unit, 
companies are turning security information 
management software, which designed sim- 
plify management, provide greater visibility and 
improve response times. Page 


Modeling Magic 

Also the Technology section: After slow start, 
operations research. with its reliance com- 
plex analytics, now key process Procter 
Gamble, says Glenn Wegryn. And it’s not just 
for addressing chain questions. Page 
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Mark: Mark Hall won- 
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Support for QuickStudy: Bayesian Logic 
that provides server and Filters. Bayesian logic ders what about the vol- Sorting Out Web 
ization capabilities, may type statistical analysis ume data that will come Services Standards 
added the Linux kernel lat- that can quantify uncertain with radio frequency identifi- DataPower’s chief security archi- 
this year, developers say. outcome determining its cation technology. tect provides road map for navigating the 
The Chicago Housing Bayesian filters are used Don Tennant says the claim 
Authority uses techniques spam-control software. three congressmen that 
ease $1.6 billion public plan sell its busi- 
housing project. Security Journal: ness Chinese company Deploying 
Keeping Wireless Rogues could threaten U.S. national protecting network-attached storage system 
the U.S. and Canada. constraints, but Mathias 
Ahashing algorithm used with wireless policy. eyes opened the reality Eliminate Integration 
onsome content that America longer has Headaches With SOA 
storage devices could monopoly IT. It’s whole DEVELOPMENT. Legacy systems and business 
nerable hackers, security new world now. complexity can wreck integration projects, 
experts warn. but AgilePath’s Eric Marks says service- 
Buy Build? Adding Dan Gillmor finds Apple’s oriented architectures can help solve this 
VoIP technology managers? The crowded obsession with secrecy problem. QuickLink 52373 
but users are stilllooking job market misguided. 
applications that will pick them up, but there’s Can Marketing Build Trust? 
payback their investments. lot said for building Jian Zhen identifies five E-BUSINESS Consumers respond well 
skills the old-fashioned way. common causes project online merchants who successfully balance 
failure and suggests ways privacy and personalization, according 
security guidelines Think Tank. head them off before Ponemon Institute survey. QuickLink 51945 
eventually apply all sites failto project begins. 
information systems. language content for the Apple Touts Tech Upgrades 
growing Hispanic population Paul Glen philos- MACINTOSH: Apple Computer has upgraded 
AutoWeb online; book ophy boss-subordinate its PowerBook line, adding faster proces- 
collaboration service competitive advantage will relationships: Each owes the sors and two new technologies: “scrolling” 
auto industry that allows come from finding the right other three things. TrackPad and feature called the Sudden 
sharing without new software. mix machines and Motion Sensor, which designed 
Frankly Speaking: Frank prevent damage the laptop dropped. 
says yet CIO. John Parker, CIO re-emergence Ray Noorda. ONLINE 
India’s outsourcing A.G. Edwards, Could this the end SCO’s What’s QuickLink? DEPARTMENTS 
and German retailer Metro blueprint anti-Linux litigation? Throughout each issue 
Jerry Bartlett answers readers’ News Briefs each story, that Subscriptions 
SAP CEO Henning questions about quality Letters story online facilitates sharing QuickLink 
plication platform due 2007 and examine the state ofthe Company QuickLink 
will give his company anedge job market reflected How Contact The Store 
its battle against Oracle. various reports andsurveys. Shark Tank QuickLink 
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DEA 
Borland Unveil 


Role-based Tools 


Borland Software Corp. this week 
will announce integrated set 
role-based application life-cycle 
management tools called the Core 
Software Delivery Platform, 
SDP. Code-named Project 
Themis, SDP includes customized 
tools for analysts, architects, 
developers and testers. The tool 
set includes technology from sev- 
eral Borland products. 


Microsoft Hires 
CRM Executive 


Microsoft Corp. has hired for- 
mer PeopleSoft Inc. executive 
oversee its CRM software. Brad 
Wilson, PeopleSoft’s former 
worldwide vice president CRM 
marketing, this week takes over 
Business Solutions operation. 
Microsoft’s current CRM head, 
David Thacher, will still manage 
CRM development, while Wilson 
oversees strategy. 


Sun Outsource 
Internal CSC 


Sun Microsystems Inc. will out- 
source much its internal 
operations Computer Sciences 
Corp. under five-year, $360 
million contract. Sun said will 
save $100 million over the term 
the pact. Under the agreement, 
CSC assumes responsibility for 
provisioning all Sun application 
development and support services 
and will manage Sun’s internal 
business applications. 


IBM Offers New 
Financing Plan 


IBM rolling out new set fi- 
nancing options aimed increas- 
ing sales small and midsize 
business customers simplifying 
the financing process. Dubbed 
IBM Financing Advantage, the ini- 
tiative extends several existing 
programs. IBM said that deals 
worth $300,000 can now 
approved within hour. 


Linux Kernel Adopt 
Server Virtualization 


Support for Xen software will added 
kernel; timetable remains uncertain 


CAROL SLIWA 
BURLINGAME, CALIF 
UPPORT for open- 
source software that 
provides server virtu- 
alization capabilities 
version the Linux kernel, 
sources familiar with the tech- 
nology said last week. 

But although Andrew Mor- 
ton, the maintainer the Lin- 
2.6 kernel, confirmed the 
OSDL Enterprise Linux Sum- 
mit here that support for the 
Xen open-source virtualiza- 
tion software “going hap- 
pen,” wasn’t clear about the 
time frame. Morton said 
won't included the 
version that’s due late this 
month. But, he added, Xen 
support might built into 
one the two subsequent re- 
leases the kernel that are 
expected later the year. 

Much will depend the 
stability the code that 
submitted Morton, said 
spokesman for Beaverton, 
Ore.-based Open Source De- 
velopment Labs Inc., which 
hosted the summit. 

Major contributors Xen 
include Hewlett-Packard Co. 
and Intel Corp., said Ian Pratt, 
founder the Xen project and 
senior lecturer the Uni- 
versity Cambridge Comput- 
Laboratory England, 
where the 3-year-old open- 
source project based. 

IBM employees who work 
the company’s Linux Tech- 
nology Center have also con- 
tributed the Xen project, 
IBM spokesman said. 

Like the leading commercial 
offering from EMC Corp.’s 
VMware Inc. division, Xen can 
execute multiple virtual ma- 
chines, each running its own 
operating system, single 
server although the two 
products work differently 
from technical standpoint. 


use Xen today, compa- 
nies must download either 
software patch prebuilt 
operating system kernel that 
includes the patch from the 
Xen project’s Web site. Thus 
far, Xen has attracted interest 
from some hosting companies 
and “the sophisticated de- 
partment which already 
heavily into Linux,” Pratt said. 

Dan Kusnetzky, analyst 
IDC, views the need for users 
major inhibitor Xen’s adop- 
tion. Most corporate users get 
Linux from distributors such 
Red Hat Inc. and Novell 
Inc., and they patch the 
kernel, their systems will 
longer supported unless 
the vendors agree accept 
the patch, said. 

Both Red Hat and Novell 
said last month that they plan 
include server virtualiza- 
tion technology their ver- 
sions the operating system 


and that Xen contender 
51794]. 

Mike Prince, CIO at Bur- 
lington Coat Factory Ware- 
house Corp. Burlington, 
N,J., said he’s less worried 
about Linux distributors than 
about application ven- 
dors, which can “finicky 
about what they’ll support.” 

A Linux user since 1999, 
Burlington Coat plans test 
Xen part effort con- 
solidate underutilized devel- 
opment and test systems and 
possibly some application 
servers well, Prince said. 
The only reason the retailer 
hasn’t already experimented 
with Xen that didn’t know 
about the project until the past 
month, added. 

Joe Poole, manager tech- 
nical support Linux user 
Boscov’s Department Stores 
LLC, said the Reading, Pa.- 
based retail chain looking 
consolidate its “lesser servers” 
this year. Boscov’s commit- 
ted open-source software 
and plans experiment with 
Xen, Poole said. But will 


Opteron chip 

Intel’s EMT64 technology. 
face a problem, at least for the 
time being. All but one 
those “lesser servers” run 
Windows, and Xen doesn’t 
currently support the Micro- 
soft Corp. operating system. 

Xen eventually expected 
support Windows through 
virtualization extensions built 
into Intel’s processors. Intel 
plans add virtualization 
support its Itanium and 
Pentium chips later this year 
and its Xeon processor next 
year, company spokesman 
said. 52398 


Red Hat Users Aren’t Racing Use 2.6 Kernel, CEO Says 


Red Hat Inc. CEO Matthew 
Szulik spoke with Computer- 
world /ast month. Excerpts from 
the interview follow: 


Did acquisi- 
tion SUSE Linux 
early last year cause 
you make any 
changes? did not alter 
our approach. Certainly, 
they're well-capitalized 
the Microsoft settlement 
[QuickLink But 
continue focus the 
most important thing about our 
company customers. 


When Red Hat Enterprise 
Linux due, and what are 
the most improve- 


ments for corporate users? 
Mid-February. don’t think there 
are going enterprise cus- 
tomers lined because they 
want the latest widget RHEL 
areas better securi- 
better policy manage- 
ment make sure that 


systems administrator 


deal with very large, 

distributed environment 
distribute security poli- 
cies; better manageabili- 
ty, course; the ability in- 
tegrated kernel that will provide 
better support for ISVs and bet- 
ter throughput; [and] areas 
around multithreading. 


you have any concerns 


that Novell supported the 2.6 
kernel first? They did but you 
know, our customers are not 
that race first. When you 
walk into Morgan Stanley and 
AOL, they want stability. They 
want manageability. They 
want have any issues about 
breaking binary compatibility. 


Who you now view your 
greatest competition? The 
same ones there have always 
been the evil-headed twin. It's 
Sun and Microsoft. 

Carol Sliwa 


READ MORE ONLINE 


An extended version of this interview 
can be found on our Web site: 


QuickLink 52288 
www.computerworld.com 


: 
will make the Xen software 
“thinn 
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Users will able bal- 
Support will added for 
operating systems 
symmetrical multiprocessors. 


www.computerworld.com 
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Push for Web-based Health Records Launched 


Duke University spearheads series 
pilot tests the U.S. and Canada 


HEATHER HAVENSTEIN 
nonprofit foundation that’s 
aiming bolster consumer 
adoption rates electronic 
health records launching 
pilot tests the technology 
Canada and the U.S. 

The Health Record Network 
Foundation (HRN), joint 
venture Durham, N.C.- 
based Duke University’s med- 
ical and business schools, this 
month disclosed plans 
launch pilot program with 
Toronto-based health system 
create portal where pa- 
tient health information 
would accessible over 
the Internet. 

Under the program, patient 
records will stored HRN 
servers. Patient approval 
would required store 
the records the server and 
make them accessible oth- 
ers. “Unless consumers are 
actively engaged, even you 
build network, doesn’t 
mean will used,” said 
Brian Baum, HRN’s CEO. 

The venture still evaluat- 
ing content management and 
database technology use 
the system 

HRN also finalizing plans 
for statewide pilot program 
Wyoming and discus- 
sions with other states. 

Most efforts extend the 
reach electronic health 
records today focus creat- 
ing standards that link sys- 
tems physicians’ offices, 
hospitals and insurance com- 
panies. For example, the U.S. 
Department Health and Hu- 
man Services and other orga- 
nizations are hammering out 
standards for such system. 


‘Health Care Internet’ 
In contrast, Baum said, HRN 
plans build the pilot 
projects form “health care 
Internet” where authorized 
physicians and other users can 
access the health care history 
all patients the system. 
Information that would 
stored the system could in- 


clude child’s inoculation 
records, the health care histo- 
aging parent, pre- 
scription data and lab results, 
Baum said. 


In Canada, HRN has teamed 


with Sunnybrook and 
Women’s College Health Sci- 
ences Centre test the HRN 


model with about 100 patients. 


The pilot program will add 
select elements internal 
computerized patient records 
the HRN portal that may 
need accessed other 


health care providers, said 
Sam Marafioti, vice president 
and CIO the Toronto-based 
teaching hospital. 

Wyoming, health sub- 
committee the state legisla- 
ture has approved pilot 
test with HRN, and the state 
now waiting for about 
$1.75 million needed fund 
the effort, said Anne Ladd, 
executive director the 
Wyoming Healthcare Com- 
mission. Ladd said the pro- 
gram should less expensive 
than other systems. 

However, Ladd noted that 
some physicians and health 
plans the state have ex- 


pressed concerns about the 
accuracy and completeness 


the data that would stored 
the portal. 


addition, the plan doesn’t 
overcome the privacy con- 


Unless con- 
sumers are 
actively engaged, 
even you build 
network, doesn’t 


mean will used. 
BRIAN BAUM. CEO. HEALTH RECORD 
NETWORK FOUNDATION 


cerns that have long dogged 
efforts build electronic 
medical records programs. 
Sue Blevins, president the 
Institute for Health Freedom, 
Washington-based health re- 
search center, said that con- 
sumers were demanding elec- 
tronic health records, then 
everyone would already 
equipped with memory stick 
with their data stored it. 
“People intuitively under- 
stand health care not like 
your banking information 
the IRS and boss know 
how much money make,” 


she said. “When you combine 


making easier get data 


with the current weak law, 
that recipe for invasion 


52397 


privacy.” 


Agent-based Lets Agency Adapt the Fly 


Improves ability 
respond tenants’ 
changing needs 


HEATHER HAVENSTEIN 
Halfway through its Plan for 
Transformation, $1.6 billion 
effort refurbish rebuild 
25,000 public housing units, 
the Chicago Housing Authori- 
(CHA) dealing with 
unexpected wrinkle its 
plans relocate residents 
during the project. 

CHA officials had planned 
relocate residents tempo- 
rary housing once its 
own massive logistical un- 
dertaking but they have 
found that many residents 
need move multiple times 
for unexpected reasons before 
work their permanent 
homes done. 

tackle this jolt and other 
fluctuating requirements, such 
special needs for seniors 
and availability housing 
units, the CHA has relied 
its Tenant Relocation Services 
Application, software system 
that uses agent technology 
from Agentis Software Inc. 
Wainut Creek, Calif., make 
real-time adjustments. 

Agency officials said earlier 
this month that the applica- 
tion’s return investment has 
been far greater than expected. 

Agent technology distrib- 


uted software components that 
can realign processes meet 
goals without human interven- 
tion practical applica- 
tion born from research into 
artificial intelligence. 

When business require- 
ments change for the CHA 
during the project, the appli- 
cation can modified incre- 
manage exception 
handling without expensive 
and time-consuming recoding 
efforts, said Barbara Banks, 
the agency’s CIO. Banks said 
the agency was able slash 
50% the budgeted cost 
building and making changes 
the application. 

“This [project requires] 
process that has never been 
done before, and con- 
stantly changing,” Banks said. 
“We may not necessarily un- 


derstand all the requirements 
the front end. There are 
not applications shelves 
can grab and use. needed 
something that was flexible.” 

part the project, resi- 
dents can move temporary 
public-housing unit receive 
voucher live private 
housing. tenants are forced 
move from the housing ear- 
ly, the authority responsible 
for finding new housing. 

The latest version the sys- 
tem, completed agency de- 
velopers October, has eight 
modules business processes 
track and adjust various 
relocation issues, such pro- 
visioning appliances and pro- 
viding security deposits and 
reimbursement for moving 
expenses, said Banks. 

The Agentis AdaptivEnter- 
prise Solution Suite has tools 
break down problem into 
series goals and plans 
achieve those goals, said Matt 
Sweetnam, principal consul- 
tant Agentis. 

Thus, the software can 
adapt provision appliances 
for tenants only under specific 
circumstances. For example, 
once moving client’s appli- 
ances reach set age, the sys- 
tem can place order with 
vendor and schedule instal- 
lation. And the system can 
change those rules for specific 
appliances, such setting 


three-year limit stove and 

five years dishwasher. 
The suite used the CHA 

includes developer tools 


build agents defining the 


conditions under which the 
plan can execute. 

“The real power agents 
they can actually learn. And 
they learn, they can self-modi- 
the rules,” said Navi Radjou, 
an analyst at Forrester Re- 
search Inc. “It goes well be- 
yond the rigid rules-based sys- 
tems, which offer you limit- 
set alternatives.” 

Agentis and other vendors, 
such Agents LLC and 
Whitestein Technologies AG, 
are maneuvering capture 
the growing demand from 
high-level executives for 
more-adaptive enterprises, 
which can respond changes 
product development, sup- 
ply chain problems logisti- 
cal challenges, Radjou said. 
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This [project 

process that has 
never been done 
before, and con- 
stantly changing. 


BARBARA CHICAGO 
HOUSING AUTHORITY 
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become 100% useless? 


Adobe Intelligent Document Platform 
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Microsoft Launches 
Research Initiative 


Following the European Commis- 
sion’s call for increased technol- 
ogy research, Microsoft Corp. 
said it’s launching initiative 
invest research centers Eu- 
rope. The EuroScience program 
was unveiled Microsoft Chair- 
man Bill Gates Prague. The first 
research center, the University 
Trento Italy, will focus 
using computational tools for 
biological research. 


Google Reports 
Sales, Profit Boosts 


Google Inc. saw revenue and net 
income grow significantly its 
fourth quarter. The search engine 
vendor said its sales continued 
climb both its own and 
partners’ Web sites. 


GOOGLE BYTHENUMBERS 


REVENUE PROFIT 


Names CFO 


Computer Associates Internation- 
Inc. raided Dell Inc. fill one 
its last remaining management 
vacancies. The company hired 
former Chief Accounting Offi- 
cer Robert Davis its new chief 
financial officer. Davis fills spot 
left open after fired former 
CFO Ira Zar October 2003 
connection with its investigation 
accounting scheme that re- 
sulted improper recording 
$2.2 billion revenue. 


Microsoft Ships 
New Search Engine 


Internet Explorer 
search engine ready take 
center stage the MSN.com Web 
portal. The portal previously used 
search technology from rival 
Yahoo Inc. The new MSN Search 
engine, beta-test mode since 
November, lets users search Web 
sites well content from 
Encarta encyclopedia 
and MSN Music. 


NEWS 


Can't 


Handle 


deluge that will soon rain down IT. Kathleen 
Mitchell, CEO CopperEye Ltd. Bath, England, 
says that radio frequency identification technology 
will arrive everywhere all too soon and that will 
asked manage the data that tracks product 
from raw materials its final configuration.” 


recent Ford Motor 
Co. recall about 
750,000 trucks under- 
scores the problem. 
small fraction the 
recalled trucks have 
faulty cruise-control 
device. Had parts in- 
formation from Ford’s 
production lines been 
accessible, the company could 
have recalled only the trucks 
affected. “I’m betting Ford had 
the data log files, but was 
too expensive keep it, 
was tossed out,” says Richard 
Cramer, vice 
president marketing and 
business development. 
and Mitchell contend that the 
situation will only get worse 
with RFID, which will balloon 
the amount data that’s gen- 
erated and make indexing the 
information relational 
database prohibitively expen- 
sive and all but impossible. 
Mitchell estimates that 
Wal-Mart Stores Inc. logged 


all its inventory via 
RFID tags for single 
day, would reach 
million terabytes 
data. Gulp! Can your 
database swallow 
that? Didn’t think so. 
So, what can you 
when RFID data man- 
agement hits your in- 
box? Consider 
yet-to-be-announced Project 
Greenwich software. Due 
Q2, Greenwich indexes the 
flat files, data logs, that 
will fed RFID information. 
According Cramer, the 
technology can easily index 
petabytes data. “Most 
the data never need,” 
says. “But when you need 
it, you need right now.” Just 
ask Ford. 


Start providing 

with new service from 
Check Point Software Technolo- 
gies Ltd. Redwood City, 


TTHEW FAULKNER 


MA 


Calif. The Program 
Advisor service, 
which being 
launched today 
component Check 
Point’s Integrity 6.0 
software upgrade, 
provides database 
trusted applica- 
tions that can 
queried real time when 
computer launches program 
for the first time. the appli- 
cation listed the data- 
base, know that it’s not 
malware. Rich Weiss, director 
endpoint product market- 
ing Check Point, doesn’t 
pretend that the current list 
85,000 applications covers 
the entire universe com- 
mercial software. But Pro- 
gram Advisor will relieve se- 
curity administrators hav- 
ing determine whether 
heretofore unknown applica- 
tial threat. addition the 
new service, Integrity 6.0 
now runs Linux and Win- 
dows clusters, automatically 
screens executable code for 
malware and improves re- 
porting Check Point’s 
SmartCenter management 
console. Pricing hadn’t been 
finalized our publication 
deadline. SmartCenter itself 
will upgraded next month 
with real-time data-correla- 
tion engine that can process 
log data from variety 
security devices the rate 
20,000 log events per sec- 
ond, Check Point said. 


Appliance controls 


network 

screening both the device 
and the user. Later this month, 
Vernier Networks Inc. 
Mountain View, Calif., will 
ship its 7000 appli- 
ance, which screens each com- 
puter logging onto corporate 


EdgeWall 7000, firewall for your LAN. 


www.computerworld.com 


HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP MARK HALL 


network for security 
vulnerabilities, such 
whether systems are 

patches. The device 
also correlates user ac- 
cess rights with cen- 
tralized Lightweight 
Directory Access Pro- 
tocol directory, says 
Bethany Meyer, vice president 
marketing Vernier. The 
EdgeWall 7000 automatically 
enforces security policies 
quarantining vulnerable de- 
vices until their deficiencies 
have been remediated. Each 
appliance can handle 
1,000 end users and costs 
$9,000. “Consider firewall 
for your LAN,” Meyer says. 


online Wiki world. 

get tools that appeal IT. 
Wiki open-source col- 
laboration environment that 
lets anyone post information 
Web site. However, most 
Wikis have primitive informa- 
tion-management tools. Palo 
Alto, Calif.-based start-up 
JotSpot Inc. intends remedy 
the situation with epony- 
mous hosted service that’s due 
JotSpot will WSYWIG 
Wiki editor, revision-control 
capabilities, page-access 
rights and other features. 
JotSpot adds the concept 
form Wikis their au- 
thors can create pages that, 
for example, include dates for 
tracking information. “Most 
Wikis don’t know what date 
number is,” says JotSpot 
CEO Joe Kraus. Wiki just 
sees text string.” Jot- 
Spot’s technology also lets 
users attach any kind file 
Wiki page and then in- 
dexes the text for search pur- 
poses, even within word-pro- 
cessing documents that are 
attached the 
page. According 
to Kraus, JotSpot 
will likely cost 

per user per 
month. 52357 
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ProLiant server blades 


read IDC’s Adapting Change: Blade Systems Move into the Mainstream, visit 


When everything works together, 
everything changes 


vers allow you integrate 
growth and unfore: 

ssors, these 

modular fashior 

dramatically 


well, everything. 


Proces 


foreseen busi 


Solutions for the 


invent 
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Experts Warn That Some 


CAS Arrays Are Risk 


Point security flaw MDS hashing 
algorithm used for digital signatures 


BY LUCAS MEARIAN 
ECURITY EXPERTS are 
warning against the 
use flawed hashing 
algorithm, for 
digital signatures store data 
securely increasingly popu- 
lar content addressed storage 
(CAS) systems. 

For instance, official 
the National Institute Stan- 
dards and Technology last 
week said managers have 
good reason concerned 
about security flaws 
pretty well known right 
now that it’s just not 
what you need,” said Elaine 
Barker, head NIST’s com- 
puter security division. 

Barker said NIST has 
plans certify recommend 
the algorithm for govern- 
ment use. 

The warnings come more 
vendors unveil CAS systems 
meet the need for disk- 
based backup fixed data 
such e-mail and medical 
images. Experts say that under 
specific circumstances, hack- 
ers could create files contain- 
ing malicious data that could 
cause data loss the dissemi- 
nation bad data. 

the four major vendors 
CAS storage, two them 
EMC Corp. and Archivas Inc. 
Waltham, Mass. use the 
algorithm. The other 
two, Permabit Inc. Cam- 
bridge, Mass., and Avamar 
Technologies Inc. Irvine, 
Calif., not. Archivas said 
provides the option using 


Correction 

(“Technology Fill All SOA 
Gaps”), Mark name 
was misspelled and his was 
listed incorrectly. Leaming vice 
president, product development, 
Navitaire Inc. Minneapolis. 


another method indexing, 
called the Secure Hash Algo- 

Users EMC and Archivas 
systems say they aren’t con- 
cerned about the warnings. 

believe that the possibil- 
ity a[problem] unlike- 
that does not bother me,” 
said John Halamka, CIO 
Boston-based CareGroup Inc., 
hospital management com- 
pany. “Thus far, we’ve been 
working with [the] Centera 
for more than year 
without single issue.” 

Curt Tilmes, systems engi- 
neer Goddard Space 
Flight Center Greenbelt, 
has been beta-testing 
Archivas Cluster CAS system 
for archiving satellite data 
about the earth’s atmosphere 
for more than year. 

said feels it’s secure 
because it’s private net- 


work with firewalls. sup- 
pose wouldn’t hurt [to use 
more secure algorithm], but 
for application, wouldn’t 
have an effect,” Tilmes said. 


Seeking Alternatives 
Meanwhile, Sun Microsystems 
Inc.’s long-awaited CAS sys- 
tem, code-named Honeycomb, 
use the the algo- 
rithm because security con- 
cerns, said Chris Woods, chief 
technology officer for Sun’s 
storage practice. Woods would 
not say which algorithm the 
company will use index 
stored objects. 

Just over week ago, Stor- 
age Technology Corp. an- 
nounced plans resell CAS 
technology from Permabit for 
e-mail archival system. 
StorageTek shied away from 
systems using because 
questions about whether 
compliant with U.S. Securi- 
ties and Exchange Commis- 
sion regulations, according 
Harvey Andruss, product 


Matures, Payback 
Remains Issue for Users 


MATT HAMBLEN 
Voice-over-IP technology will 
again the major focus this 
week’s VoiceCon conference, 
with emphasis finding 
VoIP applications that are 
beneficial business users. 
Network managers who 
were waiting see VoIP 
was mature enough have dis- 
covered that is, said Fred 
Knight, general manager 
VoiceCon 2005, which is tak- 
ing place this week Orlando. 
“So the next question is, What 
can with this technology 
help businesses work?” 
Showing companies where 
look for return their 
investments telephony 
really the core Voice- 
Con’s agenda, Knight added. 
About 4,000 attendees, 60% 
them users, are expected 


the conference, which spon- 
sored MediaLive Interna- 
tional Inc. 

Craig Hinkley, senior vice 
president network architec- 
ture Bank America Corp. 
in Charlotte, N.C., said VoIP is 
“pretty much foregone con- 
clusion” for next-generation 
corporate networks. “The dis- 
cussion used ‘if 

Hinkley will deliver key- 
note address VoiceCon de- 
scribing Bank America’s 
planned VoIP implementation, 
which designed put 
180,000 users phones 
from Cisco Systems Inc. over 
the next three years. 
50,000 users should come on- 
line this year, Hinkley said. 

About pilot projects in- 
volving 1,000 users are already 
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marketing manager for Stor- 
ageTek’s Lifecycle Fixed Con- 
tent Manager. 

SEC spokesman would 
not say whether his agency 
currently investigating possi- 
ble security flaws MDS. 

“It really time for [the in- 
dustry] stop using 
said Dan Kaminsky, security 
consultant Avaya Inc. 
Basking Ridge, N.J. “MD5 has 
been deprecated hashing al- 
gorithm for almost decade. 
The industry has clung the 
algorithm, partially out in- 
ertia, partially out scarcity 
computer power.” 

report last month, 
Kaminsky pointed out that 
attack could used create 
two files with the same MD5 
hash, one with “safe” data and 
one with “malicious” data. 
both files were saved the 
same system, so-called colli- 
sion could result, leading 
data loss the dissemination 
bad data, said. 

Mike Kilian, CTO EMC’s 
Centera division, contended 
that MDS flaws don’t apply 
Centera arrays because once 
piece content stored, 
company can’t change it. 

“Centera from almost Day 
has had multiple addressing 


under way, said. Much 
the VoIP work being coordi- 
nated Electronic Data Sys- 
tems Corp., which Bank 
America hired late 2002 
manage its networks under 
10-year, $4.5 billion contract. 
his keynote, Hinkley will 
offer advice aimed helping 
other managers navigate 
through the minefield 
bringing voice and data teams 
together build VoIP sys- 
tems. “The first thing that hap- 
pens when you mention 
doing VoIP that the room 
splits and the voice and data 


The discus- 
‘if VoIP,’ and 
now ‘when.’ 


CRAIG HINKLEY, SENIOR VICE 
PRESIDENT NETWORK ARCHI- 
TECTURE, BANK AMERICA CORP. 


So, What 
CAS? 


CAS SYSTEMS store metadata 
and data along with manage- 
ment policies create ob- 
ject that quickly retrievable, 

matter where it’s stored 
disk subsystem. CAS uses 
WORM (write once, read many) 
capabilities ensure that once 
data stored, can’t over- 
written, which satisfies several 
regulatory requirements. 


schemes available applica- 
tions,” Kilian said. 

Kaminsky disagreed. “Cryp- 
tography tends ‘gar- 
bage algorithm in, garbage se- 
curity out’ discipline,” said. 
“Let’s say they were append- 
ing custom metadata the 
end their files. Conceivably, 
the attack would not care, 
once two files have the same 
hash, you can append the 
same [identical] metadata 
both them and still 
possess the same hash.” 

Archivas officials noted that 
its CAS device does not use 
the MDS hash key name the 
file the archive, the way 
EMC’s product does. 52386 


guys set castles and start 
lobbing grenades,” said. 

Hinkley has broken Bank 
America’s VoIP project into 
separate infrastructure and 
application services compo- 
nents. The latter “where 
lot innovation and the value 
VoIP driven from,” 
said. But declined detail 
the VoIP applications that are 
being discussed the bank 
the cost the rollout. 

The security VoIP sys- 
tems could major topic 
discussion VoiceCon fol- 
lowing last month’s release 
report the National Insti- 
tute Standards and Technol- 
ogy that warned users 
careful about deploying the 
technology 52209]. 
But Knight and others said 
that VoIP security was much 
bigger issue two years ago 
and that many vendors have 
more-secure approaches now. 
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Feds Look Finalize 
Security Controls 


Keane Wins $14M 
Federal Deal 

Keane Inc. has been awarded 
new five-year, $14 million ser- 
vices contract Pension Benefit 
Guaranty Corp. The contract 
extends Keane’s 10-year partner- 
ship with the federal agency. 
Under the agreement, the Boston- 
based consulting firm will provide 
range quality assurance 
services manage the PBGC In- 
tegration and Testing Center and 
deliver verification and validation. 


AOL Set Ship 
New Browser 


America Online Inc. next week 
plans release the first public 
test version new Netscape 
browser that’s designed protect 
users from scams and malicious 
code while surfing the Web. The 
Firefox-based browser targets Mi- 
crosoft Internet Explorer, 
the subject many security vul- 
nerabilities, while taking advan- 
tage the popularity Firefox. 


Group Extends 
Accenture Pact 


Group PLC extended its hu- 
man resources outsourcing deal 
with Accenture Ltd. years 
under new $576 million con- 
tract. The deal, which will begin 
August, will cover and re- 
lated functions for all 
97,000 employees and 180,000 
pensioners. The previous five- 
year contract covered only em- 
ployees the U.K. 


IBM Buys Financial 


Outsourcer Equitant 


IBM has agreed acquire pri- 
vately held Equitant, Dublin- 
based financial outsourcing 
firm. Financial terms the deal, 
days, disclosed. IBM said 
the move aimed strengthen- 
ing its financial and administra- 
tive transformation services. All 
200 Equitant employees will 
move over IBM. 


NIST issues last draft new requirements 


JAIKUMAR VIJAYAN 
NATIONAL Institute 
Standards and 
Technology (NIST) 
has released the final 

draft set recommended 

security controls for federal 
information systems. 

The controls are likely be- 
come mandatory and non- 
waivable Federal Information 
Processing Standard the end 
this year for all federal sys- 
tems except those related 
national security. 

Some analysts predicted 
that the mandatory controls 
will cause problems for agen- 
cies, especially smaller ones. 

“It’s specify certain 
objectives. But becomes 
hard things are mandated 
down the specific controls,” 
said Michael Rasmussen, 
analyst Forrester Research 
Inc. “You can’t apply one- 
size-fits-all set controls.” 

The third and final version 
NIST’s Special Publication 


800-53 document incorporates 
several recommendations 
from people who commented 
previously published ver- 
sions, said Ron Ross, project 
leader NIST’s Federal Infor- 
mation Security Management 
Act (FISMA) Implementation 
Project. 

Passed 2002, FISMA 
the primary legislation cover- 
ing the security federal in- 
formation systems. 


Draft Changes 

According Ross, major 
changes the final draft in- 
clude reduction the num- 
ber security controls for 
low-impact systems, new set 
application-level controls 
and greater discretionary 
powers for organizations 
downgrade controls. 

Also included the final 
draft language that allows 
federal agencies keep their 
existing security measures 
they can demonstrate that the 


Hosted Apps Seek Drive 
Auto Industry Collaboration 


JAIKUMAR VIJAYAN 
AutoWeb Communications 
Inc. this week plans an- 
nounce hosted service that’s 
designed let companies 
the auto industry more effi- 
ciently share product, project 
management and 3-D engi- 
neering data via the Internet. 

The real-time collaboration 
service based product 
life-cycle management (PLM) 
software from Plano, Texas- 
based UGS Corp. and being 
positioned lower-cost and 
less-complex alternative 
implementing similar capabili- 
ties in-house. 

The UGS software will al- 
low companies collaborate 
with one another using their 


own project management and 
computer-aided design and 
engineering tools, said Nino 
DiCosmo, CEO Rochester 
Hills, Mich.-based AutoWeb. 

The new service addresses 
definite need,” especially 
for small and midsize compa- 
nies, said Doug Halliday, di- 
rector engineering systems 
and data management Gen- 
eral Motors Corp. 

“The ability share prod- 
uct design information, fast 
and effectively, all over the 
planet required becoming 
key,” Halliday said, noting that 
automakers such and 
their major suppliers are mov- 
ing global development and 
product sourcing models. 


SOURCE: NIST 


level security equivalent 
the standards being pro- 
posed NIST. 

Following two-week pub- 
lic comment period, final 
version 800-53 expect- 
Commerce Department the 
end this month, Ross said. 

Around June, NIST will pub- 
lish guide that federal agen- 
cies can use assess the secu- 
rity measures they have put 


FISMA requires agencies to: 


Group their information sys- 
tems into low-, medium- and 
high-risk categories. 


Select and implement 
initial set baseline security 
controls for each category. 


Adjust the initial controls 
local risks and conditions. 


Monitor the controls 
continual basis order 
gauge their effectiveness. 


tying together its 
global development centers, 
joint-venture partners and 
large suppliers into collabo- 
rative environment, Halliday 
said. The Teamcenter technol- 
ogy developed UGS play- 
ing key role that initiative. 

Services such those being 
offered AutoWeb will help 
suppliers integrate systems 
more tightly with their own 
business partners, and with 
those the manufacturing 
companies they supply to, 
Halliday said. 


Reaching Out 

Automotive Corp. Cen- 
ter Line, Mich., one example 
change. plans sign 
for AutoWeb’s service bid 
enable real-time product 
collaboration, initially among 
its nine North American 
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place, Ross added. “It will allow 
them see the controls they 
have implemented are produc- 
ing the desired results,” he said. 

Adopting standards such 
those proposed NIST 
crucial the security fed- 
eral systems and overall In- 
ternet security, said Larry 
Clinton, chief operating offi- 
cer the Internet Security Al- 
liance (ISA) Arlington, Va. 
But mandating compliance, 
even the public sector, 
bad idea, he said. 

ISA collaboration be- 
tween the CERT Coordination 
Center Carnegie Mellon 
University and the Electronic 
Industries Alliance, federa- 
tion trade associations. 

“The problem trying 
solve changes far too quick- 
ly,” Clinton said. traditional 
regulatory process just can’t 
keep pace.” 

Except when dealing with 
classified information, there’s 
little reason apply mandato- 
controls federal systems, 
added Will Ozier, president 
OPA Inc., Vacaville, Calif.- 
based risk management con- 
sultancy. Controls should 
applied based quantita- 
tive risk assessment that antic- 
ipates the prospective loss” 
resulting from cyberattack, 
Ozier said. 52395 


plants and eventually with its 
100 suppliers worldwide, 
said Mark Henkelmann, the 
company’s director. 

“Being cost-reduction 
mode, don’t have whole 
lot capital spend soft- 
ware,” said. “AutoWeb gives 
the ability outsource the 
collaboration piece.” 

key feature Teamcenter 
its support for the data 
format, which supports data 
sharing among different sys- 
tems, said Chuck Grindstaff, 
executive vice president 
product development UGS. 

AutoWeb trying tap into 
growing interest hosted 
PLM services, said Ken Amann, 
analyst CIMdata Inc. 
Ann Arbor, Mich. The trend 
prompting other business-to- 
business hubs, such as Exostar 
and Eurostep, to roll out similar 
offerings, added. 52396 
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Middleware Everywhere. Can you see it? 


IBM Express IBM EXPRESS MIDDLEWARE™ SOFTWARE. 
Software like WebSphere® Express designed 
help mid-sized businesses connect their processes 
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Study: China Threat 
India’s Outsourcers 


BOOMING ECONOMY and 

low wages have prompted specu- 
competitor India for outsourcing 
business. But McKinsey Co. study 
released last month concluded that 
will many years before China’s soft- 
ware outsourcing industry threat 
India’s services juggernaut. 

For starters, China’s software ser- 
vices companies must consolidate 
their highly fragmented industry 
they can gain the size and expertise 
needed capture large international 
projects, consultants New York- 
based McKinsey said. 

Smaller companies are viewed 
riskier partners that are 
vulnerable the loss 
key personnel and “may 
not have the financial 
muscle survive for the 
duration project,” the 
authors said. Yet, they 
added, the Chinese com- 
panies interviewed for 
the study showed little 
interest mergers and 
acquisitions. 
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The study also found that only six 
China’s largest software develop- 
ment companies are certified Levels 
the Software Engineering In- 
stitute’s Capability Maturity Model. 
contrast, all the top Indian soft- 
ware companies have achieved those 
rankings. 


German Retailer Reports 
99% RFID Read Rate 


USSELDORF, GERMANY-BASED 
AG, the world’s 
largest retailer, reported Jan. 
that has successfully implemented 
radio frequency identification technol- 
ogy its largest and busiest distribu- 
tion center Germany. 

Metro has processed more than 
50,000 shipping pallets 
equipped with RFID tags 
and achieving 99% tag 
read rates, said Gerd Wol- 
fram, the executive proj- 
ect manager, pre- 
pared statement. The dis- 
tribution center Unna, 
Germany, uses RFID 
readers and tags from 
Intermec Technologies 
Corp. in Everett, Wash. 


Germany and the U.K. are the lead- 
ing growth markets for RFID West- 
ern Europe, where widespread adop- 
tion expected 2006 and 2007 after 
technical issues have been resolved 
and pilot projects have been complet- 
ed, according Juniper Research Ltd. 
Hampshire, England. Juniper said 
expects RFID billion market 
Western Europe 2007. 


Tokyo Court Orders 
Word Rival Off Market 


TOKYO 
TOKYO DISTRICT COURT judge 
last week ordered halt the 

production and sale popular 
word-processing program that the 
only serious competitor Japan 
Microsoft Word. The court also called 
for existing stocks the program, 
called Ichitaro, destroyed the 
grounds that its Help Mode function 
infringes patent held Matsushi- 
Electric Industrial Co. 

Justsystem Corp., the Tokushima, 
Japan-based vendor of Ichitaro, said it 
plans appeal higher court. The 
company can continue selling the 
product until the higher court rules. 
Osaka, Japan-based Matsushita said it 
obtained patent the help function 
1998. 52347 
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Briefly Noted 


Christophe Aulnette, chairman and 
CEO Microsoft Corp.’s French 
subsidiary, has resigned become 
CEO Altran Technologies SA, the 
services and consulting firm 
said last week. Paris-based Altran, 
which has 16,000 workers 
countries, posted losses 2002 
and 2003; has yet report last 
year’s results. Aulnette had been 
chief Microsoft France, which 
has 920 employees, since 2001. 


PETER SAYER, IDG NEWS SERVICE 


SAP last week introduced 
update its Global Trade Services 
software package that’s intended 
help companies conducting import/ 
export business comply with the 
rules North American and Euro- 
pean trade agreements. 


Services Corp., global 
communications carrier based 

Segundo, Calif., last week an- 
nounced the opening Hong 
Kong subsidiary that will provide 
managed network services and 
support multinational companies 
doing business there. 


Role Sarb-Ox Problems Unclear 


Users find multiple compliance hurdles 


THOMAS HOFFMAN 
Audit and compliance experts 
last week offered mixed views 
how frequently IT-relat- 
deficiencies are signifi- 
cant issue for those companies 
having problems meeting the 
requirements the Sarbanes- 
Oxley Act 2002. 

Under Section 404 Sar- 
banes-Oxley, publicly held 
companies are required 
attest their internal finan- 
cial controls. Expert estimates 
between 20% and 25% the 
4,000 companies filing reports 
this year will reveal “material 
weaknesses” their financial 
controls. 


Moreover, some experts 
predict that more than 200 
publicly held companies will 


disclose material weaknesses 
this year because IT-related 
control deficiencies, such 
security gaps and segregation 
among applications. 

Todd Naughton, vice presi- 
dent and controller Zebra 
Technologies Corp., said the 
toughest part his company’s 
internal controls assessment 
was its operations. 
That’s largely because the 
amount testing needed. 

The Vernon Hill, 
supplier printer compo- 
nents doesn’t expect report 
any material weaknesses with 
its financial controls when 
completes its assessment this 
week, Naughton said. 

Meanwhile, officials Sun- 
Trust Banks Inc., Eastman Ko- 
dak Co., Financial Institutions 


Inc. and Ceridian Corp. each 
said the material weaknesses 
they have disclosed financial 
controls related IT. 

Many clients Meta Group 
Inc. “were keeping their fin- 
gers crossed that the auditors 
Year around all the ar- 
eas,” said John Van Decker, 
analyst the research firm 
Stamford, Conn. 

Van Decker expects that 
25% accelerated filers 
companies with market 
capitalization greater than 
$75 million whose fiscal year 
ended after Nov. will re- 
port material weaknesses 
their internal controls. The 
cause for 30% 40% those 
companies will appli- 
cation-control deficiencies. 

Van Decker and other ex- 
perts predicted that problems 


will more common among 
small-to-midsize businesses 
those with $75 million $900 
million revenues whose 
staffs are stretched too thin 
effectively deal with com- 
pliance requirements. 
According “Compliance 
Week,” Newton, Mass.-based 
weekly newsletter corpo- 
rate governance and compli- 
ance, only 3.5% the 582 
companies that made material 
weakness and “significant de- 
ficiency” disclosures 2004 


Snag 
the 582 “material 
weakness” and “significant 
deficiency” disclosures made 
in 2004, just 3.5% 
specifically mentioned 
controls, according “Com- 
pliance Week,” weekly 
newsletter corporate 
governance and compliance. 


specifically mentioned 
controls. 

However, those figures may 
deceiving because the 
largest number deficiency 
and weakness disclosures 
made 2004 were related 
financial systems and proce- 
dures, said “Compliance 
Week” Editor and Publisher 
Scott Cohen. “Companies 
don’t always disclose granular 
details about such weakness- 
es, it’s possible that many 
did include problems with 
systems and controls,” he said. 

Marios Damianides, part- 
ner the technology and se- 
curity risk services group 
Ernst Young LLP New 
York, expects that just 
accelerated filers will report 
material weaknesses their 
internal controls. Within that 
subset, just one out five 
companies will report IT- 
related deficiencies, predicted 

Damianides. 52382 
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Arkansas 


the cost AASIS $60 mil- 
lion, twice the estimated bud- 
get the project’s start. 
contracted with SAP for the 
system February 2000. 

After the initial installation 
SAP’s budgeting system 
failed, the state spent mil- 
lion software from Protech 
Solutions Inc. Little Rock, 
Ark., according to officials. A 
source within the government 
said that the state will retire 
the performance-based com- 
ponent developed Protech 
while keeping its basic bud- 
geting application. 

SAP insists that AASIS 
success overall and claims that 
the system has the support 
the governor. “We delivered 
tool for budgeting for the 
state, and they chose not 
use early on,” said William 
Wohl, spokesman for SAP 
America Inc. for the litiga- 
tion, added, “the position 
the state took not SAP’s.” 

Arkansas Attorney General 
Mike Beebe, who is represent- 
ing the state its lawsuit 
against SAP, said the technolo- 
behind the performance- 
based budgeting software 
AASIS was originally designed 
provide individual agencies 
with more budgeting freedom 
while ensuring that they hit 
operational targets. 

“The business model 
budgeting traditionally uses 
line items,” said Beebe. “This 


geting 


NEWS 


The SAP-Arkansas Saga 


SAP agrees provide 
Arkansas with ERP system 
that includes HR, payroll and 
performance-based budgeting. 


SAP Public Services Inc. 


grants more flexibility 
agencies but has risk and 
rewards system [that’s] depen- 
dent meeting goals and 
mission compliance.” 

The most recent version 
the lawsuit, filed last February, 
states that “SAP’s first attempt 
deliver budgeting system 
within AASIS required 
the contract wasn’t complete 
when SAP unilaterally changed 
course. SAP’s second attempt 
provide budget system 
‘outside’ the integrated system 
business warehouse plat- 
form also failed.” 


Other Woes 
addition, because AASIS 
didn’t comply with handicap- 
accessibility requirements, 
court shut down some non- 
essential portions the sys- 
tem last July, Beebe said. 

times the past several 
years, said, some legislators 


Partially because AASIS 
problems, the state’s 
resigns. 


ERP system goes live without adequate performance- 
based budgeting access for visually impaired users. 


The state sued employees for lack 
handicap-access AASIS; the state turn sues 


have discussed unplugging the 

entire system, though that 

rhetoric has died down lately. 
“We could end with an- 
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the unused CPU hours the 
exchange. 

Trading begin for an- 
other three six months, 
Sun official said, adding that 
the company may also offer 
CPU cycles the exchange. 

concept” phase Sun Grid 
with some users and has about 
10,000 CPUs available mul- 
tiple data centers. The base 
price for CPU time per 
hour, and Sun also offering 
per gigabyte. But volume users 
will likely pay lower rate, the 
company said. 


Subscription interest 

One user who plans evalu- 
ate the Sun Grid model Joe 
Euteneur, chief financial offi- 
cer Satellite Radio 
Holdings Inc. Washington. 
last week said has made 
Sun the sole Unix server and 
storage supplier for its back- 
office data center, which sup- 
ports business operations, 
marketing and customer ser- 
vice. The company’s broadcast 
operations use variety 
vendors, including Sun. 

“They clearly have inter- 
est,” Euteneur said. “The com- 
puter industry trying 
move toward subscription- 


State discloses plans 
unplug the performance- 
based budgeting system. 


Parts the system are 
ordered shut down for 
noncompliance with 
handicap-access 
requirements. 


other vendor they can’t pro- 
vide the software our satis- 
faction,” Beebe speculated. 
“My personal opinion that 


www.computerworld.com 


AASIS should provide what 
was contracted for.” 

added that SAP can’t 
fix the budgeting application 
and meet the handicap- 
accessibility requirements, 
“they should pay the amount 
necessary for another vendor.” 

Beebe said the state still 
preparing for trial its law- 
suit against SAP. trial date 
has yet been set, added. 

The governor’s spokesman 
declined disclose the 
amount damages that the 
state seeking from SAP. 

Beebe noted that general, 
SAP blames the problems 
lack adequate training 
and resources from the state, 
while Arkansas blames the 
performance the software. 
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based business, and obviously 
are subscription-based 
business.” 

added that sees po- 
tential cost advantages us- 
ing Sun Grid, but depends 
the service delivery and 
the actual pricing that 
could get from Sun. 

Sun expects the early 
adopters Sun Grid 
high-performance 
computing users 
industries such 
financial services, 
oil and gas explo- 
ration, and the life 
sciences. 

Jonathan 
Schwartz, Sun’s 
president and chief 
operating officer, 
said the compa- 
ny’s quarterly prod- 
uct rollout Santa 
Clara, Calif., that 
large software de- 
velopment organizations also 
may find Sun Grid appealing. 

The new approach “will of- 
fer standardized software in- 
frastructure grid that all 
their developers can get ac- 
cess to worldwide, without 
that business having main- 
tain and operate the infra- 
structure,” Schwartz said. 

Other vendors, such IBM, 
already offer pay-per-use utili- 
computing. But Sun’s fixed 
price and its marketplace ap- 
proach illustrate the increas- 


ing commoditization IT, 
said Nicholas Carr, author of 
Does Matter? Information 
Technology and the Corrosion 
Competitive Advantage 
(Harvard Business School 
Press, 2004). 

Carr said that upward 
90% company’s spend- 
ing goes basic infrastruc- 
ture. “That’s large percent 
expenditures that, 
fact, can move 
model,” 
said. think [Sun 
Chairman and 
CEO] Scott Mc- 
Nealy has seen the 
future. The ques- 
tion now is, Have 
Scott McNealy’s 
customers seen the 
future?” 

Christopher 
Willard, analyst 
Framingham, 
Mass.-based IDC, 
said the technical users that 
Sun sees likely Sun Grid 
customers have “an insatiable 
appetite” for compute cycles. 
But they will have con- 
vinced that security tight 
and that data can processed 
swiftly the grid, said. 

52393 


MORE ONLINE 


For additional coverage of on-demand 
computing issues, visit our Web site: 


QuickLink a5430 
www.computerworld.com 
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CEO Says SAP Ready for New Oracle 


JOHN BLAU 
out new appli- 
cation platform 
based its 
inte- 
gration technol- 
ogy. The Busi- 
ness Process 
Platform will lead “indus- 
trialization the software in- 
dustry,” contends CEO Henning 
Kagermann, who recently dis- 
cussed the company’s plans. 


NetWeaver was introduced two 
years ago. How would you de- 
scribe it? NetWeaver inte- 
gration platform. have in- 
tegrated many technical tools 
into that customers can 
integrate legacy systems with 
SAP technology more easily. 
The idea give people 
the outside access functions 
inside our technology. 


still rolling out NetWeaver, 
but already talking about 
the Business Process Platform. 
Why? could stop with Net- 
Weaver, but customers want 
adapt more quickly new 
business models and more 
innovative with their use 
business software, they also 
need able build new 
services faster and with great- 
flexibility. want cre- 
ate reusable processes the 
application level and combine 
these with NetWeaver. 


Will the new system based 
open architecture? Definitely. 
let customers decide 
which language they want 
develop add-ons. The discus- 
sion about whether has 
Java our own ABAP [pro- 
gramming language] stupid. 


When will Business Process 
form ship? 2006, will 
provide ISVs with broad ac- 
cess the platform they 
can develop software applica- 
tions top it. aim 
move our complete portfolio 
the [system] 2007. 


Will the new platform help differ- 
entiate SAP from Oracle? be- 


everything revolves what will happen. could see 

around data. say everything stable prices, but this depends 

revolves around processes. how determined Oracle 
gain market share. 52351 

What about price pressure,espe- 

cially the wake the Oracle/ reports for the IDG 

PeopleSoft deal? I’m not sure News Service. 


lieve so. been saying all 
along that the underlying tech- 
nology, such database sys- 

tems, commodity and that 


makes sense integrate 
our software this layer. 
want give customers the 
freedom choose. Oracle still 
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DON TENNANT 


The Three Stooges 


HEN HEARD last week that three 

U.S. congressmen were raising 

the alarm that the planned sale 

IBM’s business China’s 

Lenovo Group could threaten our 
national security, all could was shake head 
disgust and think, “Here again.” 


case you 
heard, the three congress- 
men the chairmen 
the House International 
Relations, Armed Services 
and Small Business com- 
mittees are fretting that 
advanced technology 
could transferred the 
Chinese government, and 
they want roll out 
some bureaucratic red 
tape slow down the 
government’s review 
the deal [QuickLink 52217]. The hand- 
wringing bespeaks level igno- 
rance that has been pervasive the 
U.S. Congress and media for years. 

lived Hong Kong the ’90s, 
and was there when the territory re- 
verted Chinese sovereignty July 
1997. was among the many Ameri- 
can expats there who were mortified 
the cries hysteria that were 
coming out Congress and the 
way the event was covered the U.S. 
media. remember watching Dan 
Rather that absurd flak jacket, re- 
porting midnight from the Hong 
Kong-China border. The backdrop 
was convoy trucks full Peo- 
ple’s Liberation Army soldiers rum- 
bling ominously into Hong Kong. 

You would have thought Hong 
Kong was under siege. Never mind 
that any country that gains sover- 
eignty over territory responsible 
for defending the citizens that ter- 
ritory, and that China was obligated 
ly. Never mind that never once 
not once saw PLA soldier during 
the two and half years that con- 
tinued live Hong Kong after the 
transfer. Never mind that the trans- 


fer was transparent 
that the only perceptible 
change was the appear- 
ance Chinese flags 
where the British flags 
used be. 

Now have Con- 
gressmen Larry, Moe and 
Curly running around 
making the same ill- 
informed, alarmist argu- 
ments that the oppo- 
nents Most Favored 
Nation trading status for 
China made the And they ap- 

pear have equally ill-informed, 
receptive audience. The New York 
Times, citing unnamed sources, re- 
ported that members the Com- 
mittee Foreign Investments 
the United States the multiagency 
body reviewing the Lenovo deal 
are concerned that things like 
battery technology could used 


advance China’s military capa- 
bilities. not making that up. 

The underlying problem, you see, 
that China engages industrial es- 
pionage against the U.S. Good grief. 
Don’t tell anybody, but Japan, 
South Korea, France, Germany and 
just about all our allies and largest 
trading partners. 
that’s news some circles Wash- 
ington. And we’re afraid about our 
R&D work being transferred Bei- 
jing? Please. Many U.S. high-tech 
companies have long-standing R&D 
operations China, IBM and Micro- 
soft being among the largest. I’ve 
been the facilities both, and 
some others. They’re impressive, and 
they play integral part advanc- 
ing the technologies that benefit 
people around the globe every day. 
That’s the world live in. 

not living black-and- 
white world 1930s isolationism. 
The Three Stooges are poking our 
third-largest trading partner the 
eye, and it’s inexcusable. put 
anything under review Washing- 
ton, let’s make legislative buffoon- 
ery. all better off. 52310 


MICHAEL HUGOS 


The View 
From Jo’burg 


AST FALL, made 
way from Chicago 
Frankfurt and then 


Johannesburg, South Africa, 
enced firsthand how information and 
communication technology (or ICT, 
the Europeans and Africans say) 
changing the world and driving the 
global economy [QuickLink 51329]. 
trip Jo’burg (as the locals call it) was 
real eye-opener for me. 

the past five years, the global in- 
formation infrastructure has become 
reality. It’s odd, because nearly 
talked ourselves death about all this 
during the boom years the and 
when the bubble burst, didn’t want 
hear about anymore. But hap- 
pened anyway. Some the wildest 
stock prospectus claims from the late 
are now reality imminent 
possibility. This 
happening all over 
the world, not just 
North America. 

The theme the 
three-day conference 
was “Getting the 


Most Out Your 
Department.” Topics 
included best prac- 


tices for data securi- 
ty, measuring total 
cost ownership 
and business growth 
strategies. simple 
Chicago ears were 
challenged under- 
stand English spoken 
with many differ- 
ent accents Indi- 
an, Afrikaner, Zulu, 
British. But quickly 
realized that the presentations were 
every bit substantive and advanced 
anything I’ve heard the States. 

What was expecting? Well, perhaps 
arrived, but that attitude was corrected 
the face overwhelming evidence. 
For most the past years, was 
largely driven American inventive- 
ness and entrepreneurship. U.S. com- 
panies are still major players, but 
now global industry, and many other 
countries have developed top-notch 
talent. 

The U.S. longer has monopoly 


at Network Services 
Co., a distribution 
cooperative in Mount 
Prospect, fil., that sells 
food-service and jani- 
torial supplies. He is the 
author of Essentials of 
Supply Chain Manage- 
ment (John Wiley & 
Sons Inc., 2603). 
He can be reached at 
mhugos@nsconline.com. 
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IT, and that takes some getting used 
to. But when you get used it, you 
start realize that this spread tech- 
nology making the world better 
place. revitalizing and energizing 
the economy South Africa, and the 
rest the world, too. 

One evening had dinner with two 
other speakers from the conference. 
went outdoor restaurant 
overlooking Nelson Mandela Square. 
Summer was coming the South- 
ern Hemisphere, and the restaurants 
that lined the square were filled with 
people. companions were South 
Africans Indian and Afrikaner de- 
scent, respectively. talked about all 
sorts things, from the changes that 
South Africa has gone through the 
past years the political and eco- 
nomic evolution that has made that 
possible. And talked about how the 
build-out data and telecom net- 
works South African companies 
starting drive economic growth 
much the rest Africa. 

came from very diverse back- 
grounds, yet our common experiences 
with and our thoughts how 
will the future gave reason 
together. and telecommunica- 
tions are the world’s economy today 
what steel and railroads were the 
start the 20th century. They are 


lar Web sites that publish 
information and speculation 
about Apple, its products 
and its plans. The compa- 
ny’s lawsuit had all but con- 
firmed the site’s rumors 
and the audience was essen- 
tially waiting hear what 
already knew. 

Apple, one the most fa- 
mously secretive companies 
the technology business, 
frames this case and several 
like little more than at- 
tempts protect massively 
valuable trade secrets. The Cor 
value strikes ques- 
tionable, and the larger real- 
ity Apple-aimed dagger one 
the foundations free speech: 
vibrant press. 

may think has horse this 
race. think should ahem 
think different. culture secrecy, 
enshrined law, would make even 
harder for companies know 
going on, time when transparency 
should ascendant. 

the case hand, the target 
Think Secret (www.thinksecret.com). 
The site, operated Harvard fresh- 
man named Nicholas Ciarelli (who 
goes the site pen name Nick 
dePlume), had apparently gotten in- 


s@gilimor.com. 


formation that was leaked 
someone, perhaps inside 
Apple, about the consumer 
products Apple would 
announcing. 

Apple has said state- 
ments that Think Secret 
induced people violate 
nondisclosure agreements 
and that this somehow 
gives Apple cause for 
legal action. That’s debat- 
able, but fairly sure 
this: the party leaking in- 
formation Think Secret 
had sent to, say, the San 
Jose Mercury News The 
New York Times and had 
those publications run the news, 
they doubt would have Apple 
wouldn’t suing. Both newspapers 
have deep enough pockets defend 
themselves. 

This case looks and 
prominent San Francisco lawyer Terry 
Gross, who representing Think Se- 
cret cost like bald attempt 
bludgeon publisher into submis- 
sion. media interviews, Gross has 
said believes that the case about 
intimidation, not about finding the 
source the leaks. 

The Think Secret case isn’t the first 


time Apple has sent its lawyers after 


Web sites that posted information 


about possible upcoming products. 
Late last year, the company sought 
subpoenas requiring various sites 
reveal their sources, and got court 
order. The Web sites are fighting the 
subpoenas the grounds that they 
are journalists under California and 
federal law. (Disclosure: have agreed 
file declaration their behalf, 
saying that they are indeed performing 


paid so.) 

all these cases, free speech 
the target. While can sympathize 
with Apple’s desire keep product 
announcements quiet until the day 
wants make them, vibrant press 
more important than company’s 
product secrecy despite Apple’s 
pious claim that it’s not attacking free 
speech. 

company wants take steps 
control its own activities, 
including firing suing workers who 
reveal secrets, that’s its right. When 
seeks put gag the people who 
merely receive the information, that’s 


going way too far. 52283 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/coiumns 


the foundation upon which all sorts 


other businesses can grow and 


company people goodwill that 
gives you the feeling that great things 
it. 51335 


DAN GILLMOR 


Apple Suit 
Wrong Kind 
Different 


HEN Steve Jobs 
took the stage 
the recent Mac- 


world Conference and Expo 
San Francisco make his keynote 
speech, suspense was thick the cav- 
ernous hall. But wasn’t the standard 
“What will announce?” brand 
suspense that has marked Apple Com- 
puter’s recent events this kind. 
What made different was that 
the previous week, Apple had sicced 
lawyers against one the most popu- 


Stronger, Longer Passwords May Not Lead Better Security 


LONG AGO REALIZED that the 

more difficult one makes pass- 
word, the greater the likelihood that 
will written down and kept 
obvious location (taped moni- 
tor, for example). I've made lots 
simple suggestions, such as typing 
password with caps locked while 
using the shift key get something 
like typing familiar 
number while pressing the shift key, 
using passphrases [“The Pass- 
word Is: Useless (Probably),” Quick- 
Link None works. 

opinion, the only workable 
solution for real security biomet- 
rics. hope they become afford- 
able before too late. 

Ross Valentine 

Senior network administrator, 
Technology Re-Visioned, 
Plano, IIL, 
trvalentine@yahoo.com 


with but easy- 


to-remember passwords is to use 
one the freely available “pro- 
nounceable” password generators 
available the Internet. would 
more secure generate them with- 
inthe firewall, suppose, but cus- 
tomize the generated passwords 
adding digits and punctuation. 
Thomas Swann 

Consultant, Vienna, Va., 


KELLY’S NOTION that 
long passphrase stronger 
than password fallacy. This 
hypothesis may appear correct from 
purely statistical analysis (permu- 
tational computation). However, 
smart dictionary attack used, 
passphrases are rather simple 
crack, especially the passphrase 
forms intelligible sentence that 
can easily guessed the attack- 
ing application. 
Jay Barbour, CISSP 
Dallas 


HE QUESTIONS TO ASK 

are, “What needs se- 
cured?” and, “How secure does 
have be?” 

Locking down entire work- 
stations bit over the top when 
the worst thing that could happen 
that unauthorized person could 
browse the Web use the word 
processor. 

The standard password policy 
good enough secure worksta- 
tions, but storage confidential 
files should use something like bio- 
metric verification password. 

There whole array finger- 
print, hand geometry and face 
geometry readers available (no one 
should use the unhealthy iris scan- 
ners). There also software that al- 
lows access only when hand, 
finger the face presented. 

regards cost-effectiveness 
and space consumption, fingerprint 
readers have the lead here, but fin- 
gerprints require huge templates 


compared hand geometry or- 
der accurately identify person. 
the weakest link the 
chain the authorized personnel. 
Even the thickest door like air 
when the one holding the key 
careless fraudulent. 

Security matter managing 
access and maybe even micro- 
managing access down direc- 
tory or file level. 

David Krings 


Bristol, Conn. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will edited for brevity and clarity. 
They should addressed 
Jamie Eckle, letters editor, Com- 
puterworld, Box 9171, Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 
Include address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 
| www.computerworld.com/letters 
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QUICKSTUDY SECURITY JOURNAL OPINION 

Bayesian Logic and Filters Keeping Wireless Why Projects Fail 
Bayesian logic type statistical analysis Rogues Check Jian Zhen outlines five 
discovered Rev. Thomas Bayes (right) that can took months testing and the most common causes 
quantify uncertain outcome determining its wrestling with budget constraints, project failure and 
probability occurrence. Bayesian filters are but Mathias Thurman has finally offers suggestions head 
used spam-control software because they can come with wireless policy. them off before project 
adapt over time using new data. Page Page begins. Page 


Organizations are 
turning security 
information 
management 
systems 
coordinate all the 
disparate defenses 


their networks. 
Drew Robb 


THE ONLY WAR 
costing billions. According 
Gartner Inc., budgets 
now security hardware 
and software companies 
deploy army firewalls, 
intrusion-detection and 
-prevention systems, antivirus tools 
and VPNs, well authentication, 
access-control and identity manage- 
ment systems, keep out hackers, 
criminals and other marauders. 

But any commander will tell you, 
battlefield success isn’t just matter 
superior firepower. also depends 
communication. 

From standpoint, the challenge 
how best turn ragtag bunch 
security assets each with its own log 
files, its own data structure and its own 
rules into elite defensive unit. 
achieve this, companies are 
turning security information 
management (SIM) software, 
which designed for se- 
curity what products such 
Tivoli have done for networks 
simplify management, provide 
greater visibility and improve 
response times. 

Chaim Feldman, network and 
systems security manager 
Bezeq-The Israel Telecommu- 
nications Corp., Israel’s nation- 
telecommunications pro- 
vider, reports that his company 
wards off 3,000 4,000 attacks 


per month. gain control over the situ- 
ation, installed Computer Associates 
International Inc.’s eTrust Security 
Command Center (SCC). “Before had 
this, was kind blind,” says. 
couldn’t actually see all company.” 


Stopping the Data Deluge 
Establishing comprehensive security 
requires more than just deploying 
ever-expanding array software and 
devices. also means turning them into 
coordinated set managed assets. 

“Everything was big mess,” says 
Jim Patterson, security analyst for the 
Illinois state Legislative 
Information System. “Even from ma- 
jor vendor like Cisco, each device had 
its own reporting console.” 

make matters worse, Patterson 
found that each device’s software 
package typically had run its own 
PC. That meant having track alerts 
from array machines, all which 
needed logged onto separately. 

Further complicating the issue, the 
firewalls generated more log traffic 
than the built-in database could han- 
dle. the recommendation Cisco 
Systems Inc., Patterson installed nFX 
Open Security Platform from net- 
Forensics Inc. Edison, N_J. 

“With SIM place, you can reduce 
the number people you need have 
monitoring things, since everything 

Continued page 
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Continued from page 
coming into one central station,” says 
Patterson. 

Security information management 
(also called security event manage- 
ment, SEM) outgrowth the 
event logs that managers used for net- 
work management but tailored 
gather data from security devices. 

“The big differentiator that, ad- 
dition all the logs, SIM can intake 
data from devices that don’t generate 
logs that generate robust but very 
specific proprietary information,” says 
Gartner analyst Amrit Williams. 

One the key functions reduce 
the number false inconsequential 
alerts that employees must review. 

“We began implementing intrusion- 
detection systems few years ago,” 
says Chris Rein, chief infrastructure 
and production services for the New 
Jersey Office Information Technolo- 
gy. “The volume data would over- 
whelm any person small group 
looking it.” 

Rein’s experience far from unique. 
Ulises Castillo, CEO Scitum SA, 
managed security service provider 
Mexico City, says that feeds mil- 
lion million events per day from 
the 350-plus devices manages into 
his Security Threat Manager SIM 
from OpenService Inc. Westboro, 
Mass. doing so, reduces the num- 
ber alerts factor 10,000. 

Dan Lukas, lead security architect 
Aurora Health Care, Milwaukee- 
based provider with 30,000 employees 
major hospitals and several hun- 
dred clinics and pharmacies, says that 
depending the time day, his com- 
pany receives many 5,000 
10,000 events per second. He uses In- 
tellitactics Network Security Manager 
from Intellitactics Inc. in Reston, Va., 
visualize the source problems. 

“We can play events back and see 
what devices hitting and track 
back,” says Lukas. “We have quite few 
thousand switches out there, but 
are getting the point where can 
see which port the entire network 
situation coming from.” 

Companies looking install SIM 
systems have choice between server- 
based software and appliances. The 
New Jersey government chose the lat- 
ter option. uses PN-MARS appli- 
ances from Protego Networks Inc., 
which was recently acquired Cisco. 
Rein says the state started with few 
appliances for testing and now pur- 
chasing more put its WAN under 
complete surveillance. Beyond that, 
will enter into agreements with agen- 
cies set more specific and granu- 


lar monitoring internal networks. 

“Staff feels strongly that has helped 
them improve their productivity level, 
since they don’t have mitigate 
many issues they experienced be- 
fore,” says Anna Thomas, New Jersey’s 
chief strategic development and dig- 
ital communications. 

took the software approach. 
The company runs eTrust SCC 
server sitting separate security 
network that monitors two production 
networks one for customer services 


and another for internal operations. 

Feldman says that having the SCC 
has given him better visibility into the 
types attacks his network and 
where they are hitting. For example, 
once spotted recently fired employee 
attempting gain access sensitive 
server. Another time, the data-correla- 
tion feature detected virus starting 
spread, allowing Feldman’s staff dis- 
connect the subnet stop it. 


Setting Expectations 
Implementing SIM major under- 
taking. Installing the software appli- 
ance itself generally simple enough, 
but setting the desired monitoring 
and reducing the number false posi- 
tives takes work. 

“When [companies] embark 
large SIM project about 300-plus 
audit sources/nodes they should put 
aside least $50,000 services bud- 
get for the vendor competent third 
party come in, install and tune for 
appropriate business requirements,” 
says Paul Proctor, analyst Meta 
Group Inc. “Deployments involving 
over 1,000 monitored nodes are usually 
multiyear efforts, set realistic ex- 
pectations and project goals.” 

John Summers, Unisys Corp.’s global 
director for managed security services, 
engaged just such large-scale 
project. He’s installing ArcSight Inc. 
software his company’s three securi- 
operations centers, which manage 
security for 200 customers addition 
handling Unisys’ own needs. The in- 
stallation began June 2003, and Sum- 
mers expects able view securi- 
events global scale sometime 
the first half this year. can al- 
ready manage customers individ- 


ual regional basis and has been able 
detect zero-day attacks one cus- 
tomer and harden the defenses other 
customers before hit. “The only 
way that have platform that 
can complex pattern detection 
across heterogeneous infrastructure 
and across time,” says Summers. 
Michael Gabriel, corporate secu- 
rity manager Career Education 
Corp. (CEC) Hoffman Estates, 
recently installed netForensics soft- 
ware meet the auditing require- 
ments the Sarbanes-Oxley Act. “It’s 
bit challenging environment, 
since run number separate 
Active Directory forests,” says. “We 
have collector device each for- 
est, which collects the events from the 
Windows Domain Controllers, fire- 
walls and IDSs and sends these 


centralized netForensics collector.” 


meet the regulatory deadline, 
CEC purchased five days consulting 
time quickly get the netForensics 
software and running. That was 
enough establish compliance, but 
Gabriel says still has lot work 
fully use the system’s functions. 

“It’s complex system, and you will 


get out what you put into it,” 


says. still feel have just scratched 
the surface its capabilities.” 

Part what companies must put 
the work ensure data quality. “SIM 
suffers from huge garbage in/garbage 
out problem, and most the data col- 
lected enterprises garbage,” says 
Meta Group’s “They don’t 
usually realize this until after spending 
several hundred thousand dollars 
huge monitoring infrastructure only 
realize they are deriving benefit.” 

Like other types management soft- 
ware, SIM only tool. can assist 
your security personnel better secur- 
ing the enterprise, but it’s not replace- 
ment for their perception and skills. 

“You automate data collection, data 
correlation, data search the tasks 
that are boring and suitable for com- 
puters,” says Bruce Schneier, author 
and chief technology officer Coun- 
terpane Internet Security Inc. 
Mountain View, Calif. “But you can’t 
automate intelligence, and you can’t 
automate creative thinking.” 52131 
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Expensive SIM systems are primarily used by big 

corporations, but there are options for smaller firms 
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operations research builds 
better supply chains Procter 


Gary Anthes 


www.computerworld.com 


PERATIONS RESEARCH, the 
application modeling 
and mathematics busi- 
ness problems, had had 
checkered history The 
Procter Gamble Co. 
since was first tried 
1968. That all changed 1993, when 
P&G hit financial home run using the 
process and operations research (OR) 
leapt prominence the company. 

the early 1990s, the maker Pam- 
pers diapers, Pert shampoo, Pringles 
potato chips and nearly 300 other con- 
sumer products decided look broad- 
and deeply into its entire North 
American manufacturing and distribu- 
tion network, and tapped two 
staffers join team charged with re- 
ducing supply chain costs and improv- 
ing efficiency. The project team devel- 
oped computer models that pointed the 
way supply chain restructuring that 
would consolidate P&G’s North Ameri- 
can plants 20% and lower supply 
chain costs $200 million year. 

“That project planted seed,” recalls 
Glenn Wegryn, one the analysts 
the project and now associate director 
17-person group, known 
Global Analytics. “It really was 
wake-up call about the capability you 
could provide using tools tied 
deep understanding how P&G’s 
operations worked.” 

While many companies put 
their engineering research depart- 
ments, P&G put its group its 
shop. “IT one the very few organi- 
zations within company that has true 
end-to-end visibility into all the opera- 
tions the company,” says Wegryn. 
“Part our success that are 
crossover capability; have much 
edge our instruments and tools.” 

Wegryn’s group works some 100 
projects year and has worked 
every P&G product category and geo- 
graphic region. Most, but not all, the 
problems considered Global Ana- 
lytics can thought supply 
chain questions: How many plants 
should there for this new product, 
and where? Where should distribution 
centers located? the opti- 
mum transportation network? How 
can deliver faster and better 
these particular customers? 

Global Analytics has fixed annual 
budget; instead, must find internal 
clients willing fund its services. We- 
gryn guarded about the financial re- 
sults individual projects, but will 
say that aims save P&G times 
his group’s salary costs projects. 
“We far exceed that goal,” adds. 
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P&G applies IT-assisted analytic 
techniques three broad areas. First, 
uses optimization models deter- 
mine how best allocate supply chain 
resources, most often the basis 
net present value. 

Second, simulation models allow 
P&G mathematically try out various 
options see how they might play out 
over time, and test the sensitivity 
results changes key variables. Sim- 
ulation and optimization models are of- 
ten used together. optimization 
model may point option that 
further evaluated and tweaked simu- 
lating how supply chain would behave 
under that option and how stable is. 

found that the success 
supply chain not necessarily operat- 
ing the absolute optimal solution, but 
operating one the more robust so- 
lutions the real world,” says David 
Dittmann, Global Analytics manager. 

Third, the company uses decision 
analysis, which involves the use of 
techniques such decision trees that 
combine the probabilities various 
outcomes and their financial results. 


Levels Complexity 

P&G’s models are implemented sev- 
eral ways, depending the complexi- 
the problem. Some are written 
Microsoft Excel, which often pushed 
way beyond the capabilities simple 
spreadsheets commercially avail- 
able add-ons. For example, P&G some- 
times uses What’sBest from Lindo Sys- 
tems Inc. Chicago build large- 
scale optimization models within 
spreadsheet. Another favorite Pre- 
cisonTree, tool for building decision 
trees inside spreadsheets, from Pal- 
isade Corp. Newfield, N-Y. 

P&G also uses stand-alone pack- 
ages, such Xpress-MP from Dash Op- 
timization Inc. in Englewood Cliffs, NJ., 
and Cplex from Ilog Inc. Mountain 
View, Calif., which are for constructing 
optimization models. uses Extend 
from San Jose-based Imagine That Inc. 
for building simulation models. Ditt- 
mann says some the packages require 
programming coding rules define 
objectives and constraints, for example. 

While the models are developed 
Dittmann and others Global Analyt- 
ics, the data maintained and served 
the information comes out 25TB 
Oracle data warehouse called Source- 
One, which contains months sup- 
plier, manufacturing, customer and 
consumer histories region. 

But would mistake give all 
the credit for the success P&G 
higher math and clever algorithms 


TECHNOLOGY 


Crest. Charmin, Head 


Pampers 


churning through terabytes informa- 
tion. “What’s really the key 
not just the technical side; it’s also the 
very deep understanding how 
business operates,” Wegryn says. 
Indeed, the people P&G say 
their skills business consultants can 
make all the difference. Joel Kahn, 
section manager Global Analytics, 
says helps his internal customers 
move their problems “from the gut 
the head.” often begins projects 
asking his customers these ques- 
tions: What are you trying decide? 
what measure will you base deci- 
sion? What are the options? 
bothering you, and what’s uncertain? 
Kahn helps users answer those ques- 
tions meeting that typically lasts 
day less. six-month project de- 
velop and run sophisticated models may 
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come next, but not always. Says Kahn, 
“About one out five six times, peo- 
ple say, ‘Now understand it. don’t 
need any more analysis. didn’t 
realize options were 
Jean Kinney, purchasing manager 
P&G, tells the launch new 
global health care product whose suc- 
cess hinged the careful choice 
plant locations and sources raw ma- 
terials. “It was extremely complicated, 
and there were literally millions and 
millions possibilities,” she recalls. 
“If you went the managers the 
countries that would marketing this 
product, all say, ‘Well, the plant 
you talked some the corporate ex- 
perts, they’d say, ‘But scale important. 
You should build one big megaplant 
somewhere.’ And there were millions 
options between. how you 
come with the best approach? Mod- 
eling techniques allowed that.” 
help Kinney solve the problem, 
Global Analytics constructed Excel- 
based models using Lindo’s What’sBest 
for optimization and the Palisade’s 
@Risk add-on module for Monte Carlo 
simulation, which values for uncer- 
tain variables are randomly generated. 
The models sought maximize net 
present value and, for each country, 
considered manufacturing costs, freight 
costs, taxes, import/export duties, local 
wage rates, cost capital and more. 


“At the beginning the project, 
asked all the team members write 
down where [they thought] would 
end how many plants, and where 
would they located,” Kinney says. 
“No one came close.” 

Michael Policastro director cus- 
tomer service and logistics for P&G 
Global Beauty Care, and says has 
not one supply chain worry about 
but hundreds combinations sup- 
pliers, manufacturing facilities and 
markets. “And you multiply that 
new initiatives product launch- 
year, quickly mushrooms into 
hugely complex work process design 
all those supply chains,” says. “Then 
there’s the range options open you 
[in each] supply chain, you leverage 
help you with that process.” 

P&G has dozens beauty care 
products, each coming multiple 
sizes and package designs. Change 
constant, and the tiniest modification 
can ripple through the supply chain. 
simple cap change may, for example, 
only sourced from Chinese suppli- 
er, and now I’ve added days 
supply chain time,” Policastro says. 
“What does that inventory levels, 
service levels, costs and on?” 

The complexity his supply chains 
and the consequent need for automat- 
techniques will only grow, says 
Policastro, P&G increasingly tries 
address the needs each the retail- 
ers works with, well the needs 
different groups consumers. 
Wal-Mart hair-care shopper may not 
have the same needs Target shop- 
per,” says. “We are now going 
through customer and channel differ- 
entiation and are marrying that with 
greater consumer insights. 

“Having worked with Global Analyt- 
ics for couple years, think they 
embody the term information 
technology very well the sense 
that they couple not just the technolo- 
analytics, modeling and options 
analysis with but also 
with the knowledge key supply 
chain information such import du- 
ties, the latest tariff regulations, trends 
labor costs, and P&G manufacturing 
principles,” Policastro says. 

says it’s good that Global Analytics 
must fund itself finding paying cus- 
tomers inside the company. That way, 
explains, “their survival depends 
the quality their services.” 52126 
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Baye 


TECHNOLOGY 


Filters 


DEFINITION 


Bayesian logic type statistical analysis that 
can quantify uncertain outcome determin- 
ing its probability occurrence using previously 
known, related data. Bayesian filters are used 
spam-control software because they can adapt 
over time using new data. 


RUSSELL KAY 
OME SAY that you 
can’t measure some- 
thing, you’re not doing 
science. Bayesian logic 

offers way measure things 

that were previously unmea- 
surable, allowing test hy- 
potheses and predictions and 
thereby refine our conclusions 
and decisions. Bayesian filter- 
ing hot topic the area 
spam control today. 

Basic probability simple 
calculate, because 
dealing with limited number 
factors and possibilities. 
Let’s consider horse race 
with horses entered. 
that’s the only infor- 
mation have 
which to base a wager, 
then could pick any 
horse the basis that 
its chance winning 
10, 0.10. Take that 
kind of math to the track, how- 
ever, and quickly sep- 
arated from the contents 
your wallet. The real world 
far more complicated, and 
here’s where Bayesian logic 
comes into the picture. 

fact, each the horses 
has already run least few 
races and therefore has his- 
tory. Lightning has won 
every race has entered, and 


Thunder has lost every one 
has entered, then got 
real evidential basis which 
bet Lightning instead 
Thunder. 

In fact, there’s a lot more 
information available about 
every horse the race. 
know can easily find out 
the following: 

Lineage: this horse the off- 
spring champion? How 
have his brothers and sisters 
performed? 

Performance under different 
weather conditions: rains 
the morning and the track 
soft, how does that affect his 
speed? 

Position the track: 
our horse next the 
rail the outside? 
And how does the 
horse react when he’s 
that position? 

Length time since last race: 
the horse ran a long, hard race 
yesterday, how well like- 
run today? 

Distance today’s race: How 
has the horse fared this dis- 
tance the past? 

Other people’s betting pat- 
terns also come into play. 
They don’t affect how well 
horse will perform, but they 
have clear impact the size 
the payoff does win. 


All this information can 
help make better estimate 
our horse’s chance win- 
ning than the simplistic out 
10. Analyzing these factors 
Bayesian process. 

Similar things are happen- 
ing the world Major 
League Baseball ever the 
province voluminous statis- 
tical records. Team owners 
and general managers are 
using Bayesian analysis when 
they study the way players 
perform under various condi- 
tions and specific situations 
and factor that information 
into their decisions about the 
players they want draft 
seek trades. 


Bayesian Antispam 

The application Bayesian 
logic the spam problem got 
its start Paul Graham’s 2002 
paper Plan for Spam” (www. 
approach that was soon 
adopted numerous devel- 
opers. Bayesian spam filtering 
based the notion that the 
presence certain words will 
indicate spam, while other 
words will identify message 
legitimate. has that 
common with other types 
scoring-content-based filters, 
but with the added advantage 


Logic 


that Bayesian filters create 
their own lists telltale 
words and characteristics 
rather than working from lists 
created manually. 

Bayesian filter starts 
examining one set e-mails 
known spam and another 
set known legitimate 
(the prior knowledge). com- 
pares the contents for both 
sets not just the message 
body, but also header informa- 
tion and metadata, word pairs 
and phrases, and even HTML 
code for information such 
the use specific colors. 
From this, builds database 
words, tokens, with 
which can usefully identify 
future e-mails spam not. 

Bayesian filters take into ac- 
count the whole context 
message. For example, many 
spam messages contain the 
word free the subject line, 
but too some legitimate 
messages. Bayesian filter 
notes this word but also looks 
other tokens the message, 
because falsely identifying 
real message spam (called 
false positive) causes more 
problems than letting some 
spam through legitimate. 

According proponents, 
less than the messages 
identified spam Bayesian 
filters are false positives. 

The Bayesian spam filter’s 
real power, however, lies in its 
ability learn: the user 
tags new messages, the filter 
updates its database identi- 
new patterns spam. 
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Bayes and 
His Theorem 


Rev. Thomas Bayes 
1761), English clergyman, 
credited the author “An 
Essay Towards Prob- 
lem the Doctrine Chances.” 
Published posthumously 
1763, the paper set out what 
now call Bayes’ Theorem, for- 
mula for estimating the proba- 
bility that something will occur 
based the likelihood relat- 
but independent events. use 
the term event here, but can 
understand signify the truth 
such determining whether 
particular message spam. 
Before setting out the equa- 
establish some nota- 
tion conventions from statistics. 
The expression p(A) refers 
the probability that event will 
occur. When say 
this stands for “the probability 
that event will happen, given 
that event has hap- 
pened.” With that notation, 
here Bayes’ Theorem: 


suspect that most readers 
find this equation espe- 
cially helpful, and I’m not 
about attempt mathematical 
derivation; the statisticians al- 
ready know it. But does show 
that Bayesian analysis based 
calculations that make use 
prior knowledge. 

For much more thorough 
explanation, read Eliezer Yud- 
kowsky’s clear, detailed, step- 
by-step online tutorial, “An 
tuitive Explanation Bayesian 
Reasoning: Bayes’ Theorem for 
the curious and bewildered; 
excruciatingly gentle introduc- 
tion” 
you should set aside least 
half hour study but pa- 
tient, and when finished, 
have good understand- 
ing things Bayesian. 

Russell Kay 
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Keeping Wire 
Check 


After months testing and taking budget 
constraints into consideration, our security 
manager comes with wireless policy. 


Mathias Thurman 


FINALLY SETTLED 
egy for wireless security. 
wireless access points 

began appearing our 
company’s network, config- 
ured them with Cisco’s Light- 
weight Extensible Access Pro- 
tocol. (See column, 
“Taking the Leap PEAP for 
Wireless,” QuickLink 50430.) 
LEAP forces users authenti- 
cate the access 
point with their enter- 
prise credentials 
the same credentials 
used for virtual pri- 
vate network access, 
well services 
such payroll and 
Microsoft Exchange e-mail. 
That’s because use cen- 
tralized directory that ties into 
most our core applications 
and lets employees use single 
password sign on. 

Although LEAP works well, 
didn’t want take the 
chance that those enterprise 
credentials would become 
compromised someone 
hacked the wireless infra- 
structure. decided use 
Protected Extensible Access 
Protocol (PEAP) with RSA 
SecurID token authentication. 
This combination requires 
wireless user enter his user 
identity and his to- 
ken, which personal iden- 
tification number followed 
dynamic number that 
changes every seconds. 
This way, even PEAP 
compromised the extent 
that the user obtained, 
the hacker would still need 


SECURITY 
JOURNAL 


laptops with the TruMobile 
client installed. Our testing 
showed that the TruMobile 
client works well with PEAP, 
SecurID and the Cisco access 
points. Our small contingent 
Linux users will need 
third-party client such 
Aegis from Portsmouth, N.H.- 
based Meetinghouse Data 
Communications, which sup- 
ports Linux and 
PEAP. 

Another issue 
capacity, since 
there’s limit 
how many clients 
can associate 
single access point. 
Until beef our infra- 
structure, the plan re- 
strict wireless access users 
who demonstrate business 
need. Once user obtains 
management approval, 
send him SecurID token 
with instructions how 
configure his client. 

With the PEAP/SecurID 
portion our wireless policy 
place, turned attention 
evaluating and experiment- 
ing with various technologies 
for detecting rogue access 
points. decision had 
based several factors, the 


Because the 
company operates 
worldwide, decided 


had extensive testing 
this setup. Our current corpo- 
rate standard issue Dell 


and wired approach 
rogue access- 
point detection. 


TECHNOLOGY 


first being money. Unfortu- 
nately, company trying 
conserve resources, and 
there just isn’t enough money 
outfit every remote office 
with wireless sensors. 

Because the company oper- 
ates worldwide, decided 
take both wireless and wired 
approaches rogue access- 
point detection. 

the wireless side, 
wanted stick with Cisco. 
That wasn’t because has 
best-of-breed wireless sen- 
sors, but because already 
have relationship with Cisco 
and are already managing 
dozens Cisco access points. 
also believe that Cisco will 
eventually provide the type 
functionality really 
looking for. addition, 
use Cisco access points for 
rogue access-point detection, 
there’s always the option 
converting those devices back 
access points. 


Enterprise Searching 
But have remote offices 
where can’t deploy wire- 
less sensors, and still want 
able discover the pres- 
ence wireless access points 
the wired network. 
enterprise level, this can 
accomplished two ways. 

The first assess every 
switch port’s media access 
control address order 
find the wireless vendors’ IDs 
(the first three octets the 
MAC address). This isn’t fool- 
proof, however, since some 
wireless vendors also make 
wired equipment. 

For example, Cisco makes 
both network hardware and 
wireless access points. 
come across MAC address 
for what looks like Cisco de- 
vice, could have false 
positive for wireless device. 

Another problem with this 
method that might not 
have access every switch 


our infrastructure. our 
company, some the engi- 
neering departments manage 
their own network gear. 

The second way detect 
wireless access points the 
wired enterprise network 
scan every address and at- 
tempt identify access points 
the responses get. you 
know the signature ac- 
cess point, know when 
your probing has hit one. 
The problem knowing those 
signatures. would fairly 
simple write scripts that 
would allow our Nessus scan- 
ning infrastructure look for 
wireless signatures, but since 
each vendor could have its 
own fingerprint, have 
purchase every ac- 
cess points and run tests get 
proper fingerprint. Unfortu- 
nately, just don’t have the 
resources tackle that task. 

But have the re- 
sources turn San Mateo, 
Calif.-based AirWave Wireless 
Inc. Beyond its vendor-inde- 
pendent, centralized wireless 
management tool, AirWave 
has done all the legwork and 
fingerprinted more than 
wireless access points. then 
built tool, called RAPIDS, 
that, among other features, 
scans the network for those 
fingerprints. conducting 
some correlation with the 
MAC address scanning (which 
AirWave can also accomplish), 
can determine whether 
device that’s been pinpointed 
RAPIDS rogue and then 
trace back the switch port 
which it’s attached. 

All this isn’t 100% fix 
for keeping rogue access 
points check, but feel 
that the combined wired/ 
wireless approach will 
about 90% effective. Over the 
course the next several 
months, deploy this tech- 
nology and able re- 
port back meaningful results. 


WHAT YOU THINK? 


This week's journal is written by a real securi- 
“Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 
thurman@yahoo.com, or join the discussion 
in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 


www.computerworld.com 
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Security Bookshelf 


Gray Hat Hacking: The Ethi- 
cal Handbook, 
Shon Harris, Allen 
Harper, Chris 
Jonathan Ness and 
Michael Lester (Mc- 
Graw-Hill Osborne 
Media, 2004). 


Security professionals 
should keep current 
with hacking tools and 
techniques order prevent 
attacks and assess vulnerabili- 
ties. This up-to-date handbook 
offers information about topics 
ranging from the use Etter- 
cap and the writing and debug- 
ging exploit code 
tions tools such Core 
pact and Immunity Security 
Canvas. Questions test the 
understanding 
each chapter. Although I'd like 
more certain subjects, such 
writing Linux shell code, the 
most important aspects 
each topic are well covered. 

Mathias Thurman 


AOL Aims 
Secure Surfing 


America Online Inc. next week 
plans release the first public 
beta browser designed 
protect users from scams and 
malicious code while surfing 
the Web. With frequently up- 
dated blacklist Web sites 
stored the PC, Net- 
scape will alert users with 
red check mark the browser 
tab sites associated with 
phishing the distribution 
spyware other malicious 
code. Netscape based 
Mozilla Firefox but also sup- 
ports internet Ex- 
plorer browser engine. 


Spyware Rise 


The most malicious forms 
spyware increased dramati- 
the last three months 
2004, according the 
SpyAudit report from Earth- 
Link Inc. and Webroot Soft- 
ware Inc. From October De- 
cember, the instances sys- 
tem monitors rose 230%, 
while the instances Trojan 
horses rose 114%. 
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ManageSoft Offers 
Mac Support 


ManageSoft Corp. Boston has 
begun providing support for Apple 
Computer Inc.’s Mac operat- 
ing system. The ManageSoft sys- 
tem used for automatic deploy- 
ment, updating and management 
software and security patches. 
Support for Mac allows cus- 
tomers with heterogeneous envi- 
ronments use single system 
manage their desktops, servers 
and handheld devices, the compa- 
said. The product priced 
$72 per device. 


Optinuity Ships Ops 
Management App 


Optinuity Inc. Bethesda, Md., 
shipping C20, operations 
process management system. 
will improve the control, speed 
and reliability 
support activities automating 
administrative and problem-reso- 
lution tasks normally handled 
operations personnel, according 
the company. Pricing for C20 
starts $150,000 for multi- 
server application environment. 


Dell 
Business Notebooks 


Dell Inc. last week announced 
three business notebook comput- 
ers. The D410 weighs 3.83 
has optional nine-cell extended 
battery and sells for $1,677, the 
company said. The D610 
starts $1,384. The D810 fea- 
tures 15.4-in. wide-aspect dis- 
play and 128MB dedicated 
memory for graphics. weights 
6.49 and sells for $1,549. 


‘Latch’ Could 


Replace Transistors 


Hewlett-Packard Co. research- 
ers last week said they have de- 
veloped nanometer-size technol- 
ogy that may one day replace the 
transistor and shrink the size 
computers. Called the “crossbar 
latch,” can perform functions 
now handled larger transistors. 


JIAN ZHEN 
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Why Projects Fail 


T’S ESTIMATED that over 50% some say 80% 

all large projects fail. The reasons for 

that startling failure rate aren’t mysterious. Too 

many companies make the same mistakes too 

many times. I’ve identified five the most com- 
mon causes for failure. I’ve also come with some 
questions your organization should answer before 
starts project, boost the chance success. 


The real value 
understood. When cal- 
culating ROI, sure 
have clear understanding 
the total cost owner- 
ship. Without concrete 
TCO, the figures are 
meaningless. 

Understanding the vari- 
ous ROI metrics, acknowl- 
edging that these are fuzzy 
metrics and clearly defin- 


ing what the organization 


expects from successful 
implementation will produce clear 
view the project’s value. 

You don’t know your users. Who are 
the main users the technology 
implementing? Are they busi- 
ness users technical users, power 
users casual users? 

Business users are usually from 
marketing, finance and other nontech- 
nical groups the organization. They 
want see summaries, dashboards, 
charts, graphs and other reports that 
enable them spot trends. 

Technical users are usually from IT, 
security and other operations groups. 
These are the ones who want all the 
nitty-gritty details. They want drill 
down and diagnose problems. They 
perform the root-cause analysis when 
things wrong. 

Power users want sophisticated in- 
terfaces and flexibility. They generally 
use the system three four times 
week even every day, and they can 
anywhere the organization, in- 
cluding marketing and finance. 

Casual users are the system once 


week less. They may 
not even log all and 
prefer receive reports 
via e-mail. 

The only way 
identify real require- 
ments talk potential 
users and get the answers 
these questions: Are 
your requirements based 
regulations, operational 
problems, performance. ca- 

optimization 
trend analysis? 

you have platform requirements 
Windows? Linux? Java? How 
about requirements integrate with 
corporate infrastructure? 

your requirement perfor- 
mance? Scalability? Extensibility? 
Manageability? Usability? Security? 

Before evaluating any technology, 
answer those questions detail. Don’t 
choose product create unreason- 
able requirements because brand 
loyalty FOE (friends executives). 

limited your options. Too often, 
companies decide that only commer- 
cial product will meet their require- 
ments, before all the options have 
been evaluated. 

Before you jump commercial 
solution, you should evaluate your re- 
sources and skills within your own or- 
ganization and see you can should 
open-source. There are many fac- 
tors consider when choosing among 


the commercial, open-source home- 
grown options. 


you have the resources (head 


count) support whatever option you 
choose? Commercial products may 
save you some development time and 
head count, but you may get faster fea- 
ture updates you have dedicated de- 
velopers for homegrown system. 

your engineers have the neces- 
sary skills maintain open-source 
product develop homegrown so- 
lution? This really goes back your 
requirements. 

Even you have the resources and 
skills within your organization, can 
you spare the time from other projects? 
your budget? will vary based 
the executive sponsor, the project’s 
scale, its urgency and other factors. 

Knowing your requirements will 
allow you find the right option 
meet them. 

You don’t have clear understanding 
the products available. Many the 
products out there are strong some 
areas and weak others. Many ven- 
dors will tell you that they are strong 
all areas. they tell you that, run 
away fast you can. 

Tell the vendors about your require- 
ments. Ask them rate how well each 
their products meets your require- 
ments. Ask for evaluation. Ask 
them how their software/hardware 
compares with that their competi- 
tors. Ask them share their product 
road map. Ask about the support 
structure. 

Never buy product without actual- 
using it. There’s way tell 
whether meets your requirements 
looking PowerPoint slides. 

Try open-minded. There are 
100% solutions. Prioritizing your 
requirements will help you determine 


which system best fits your company. 


Spending some time upfront will 
help you avoid these common prob- 
lems and allow you meet your real 


requirements. 52318 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 


Network Friendly. 


advanced technology makes network 
administration, updating, and training 


Common driver, common interface makes business simple and increases 
productivity. And NetView™ software gives you one manage 
everything. looking for the best class printers, copiers, 

and network solutions, look Kyocera for 

exceptional solution. 


MIS Director 
Midwest 


Calculate your total cost ownership and savings: 


to: kyoceramita.com/us TCO 
and click the: TRACKER. 


People Friendly. 


Network Friendly because: 


Outstanding Performance/ Reliability 
Integrated Wireless Solutions 
Extremely Low Cost Ownership 


Cartridge Free Drum Design 


THE NEW VALUE FRONTIER 


KYOCERA MITA CORPORATION KYOCERA MITA AMERICA, INC., a group company of Kyocera Corporation 
©2004 KYOCERA MITA CORPORATION AND KYOUERA MITA AMERICA, INC. “PEOPLE FRIENDLY”, THE KYOCERA “SMILE” AND THE KYOCERA LOGO ARE TRADEMARKS OF KYOCERA. 


| 
| 
4 


MENT 


MENTOR 


OYCE YOUNG 
adding three new man- 
ager positions her 
50-person group. 
She wants fill the 
new slots March. It’s 
tight schedule, but 
Young has plan: Pro- 
mote from within. 

know have outside for cer- 
tain technical expertise don’t have 
inside, but really try look internally 
can,” says Young, the Chicago- 
based CIO Kelco, J.M. Huber 
Corp. company. 

the list required skills for tech- 
nology and management jobs grows, 
like Young must decide whether 
“build” “buy” managers. Each 
strategy comes with its own benefits 
and drawbacks, CIOs should weigh 
time requirements, organizational 
needs and even retention plans when 
deciding which way go. 

“There’s black-and-white answer. 
It’s very situational,” says Robert 
Rosen, president Share Inc., 
Chicago-based nonprofit organization 
IBM users. 

Leading CIOs, recruiters and em- 
ployment experts agree that whether 
build buy shouldn’t viewed 
either-or question. fact, they say, 
the best solution for any organization 
one that includes both tactics. 

mixed strategy,” says Bruce 


CIO John Parker A.G. Edwards 
offers career blueprint for 
professionals with their eyes 
the top spot. Page 


Think Tank 


Many U.S. Web sites fail provide Spanish- 
language content for the fast-growing His- 
panic online population; and new book says 
competitive advantage will come from figur- 
ing out the right mix machines and people 
improve customer service. Page 


OPINION 

Workplace Obligations 

Trying relate your boss can tear 
you and tucker you out without 
accomplishing much. Paul Glen 
suggests simpler way figure out 
your responsibilities work. Page 
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Goodman, CIO Humana 
Louisville, Ky. “You want team that 
has lot players. And you have 
identify and recruit players wher- 
ever they are.” 

Goodman says companies that build 
management skills in-house are build- 
ing loyalty and capitalizing institu- 
tional knowledge, too. 

remembers one staffer who 
showed aptitude for leading others. 
Goodman put him charge the 
company’s help desk, where, after some 
additional training, proved his abili- 
run team and get things done. “If 
hadn’t done that,” Goodman says, 
“he might not have stayed around.” 

Statistics support that assertion. 
“There’s lot bang for the buck 
growing them from within,” says Bev- 
erly Kaye, founder and CEO Career 
Systems International Inc. Scranton, 
Pa., and co-author Love Lose 
Getting Good People Stay, Third 
Edition (Berrett-Koehler, 2005). 

Kaye’s recent survey more than 
1,000 workers all levels found 
that exciting work and challenges, 
along with career 
growth, learning and 
development, are 
among the top fac- 
tors that keep work- 
ers with their current 
employers. 

Barbara Kunkel, 
CIO Rochester, 
law firm 
Nixon Peabody LLP, 
says building skills 
among existing 
workers has helped 
her create loyal staff 
members who feel 
passionate about 
their work. 

“People become proud what they 
do. You can’t buy that. And you can’t 
get overnight,” she says. “And need 
consistent, passionate people who can 
move this organization forward.” 
Kunkel’s five direct reports, one has 
been with the firm for years; two 
others have been there for nearly 10. 


Retaining Knowledge 


Building management team from in- 
ternal staff doesn’t just breed loyalty, 
however. The process also guarantees 
what Rosen calls “corporate memory” 
the knowledge where things are, 
how things work together and the un- 
official ways projects get done. 

remembers working one com- 
pany that hired CIO who brought 
new managers. Those managers then 
undertook initiatives that had previ- 


wherever they are. 


ously failed the company. “There 
were lot false starts done the 
new people,” Rosen recalls. 

Bringing new people board can 
cost tens thousands dollars 
headhunter and relocation fees, not 
mention the costs disruption the 
office, experts say. But training existing 
staffers move into management po- 
sitions can expensive too. 

Young once worked engineer- 
ing company that put premium 
employee retention. when Young 
had fill two management posi- 
tions, she promoted workers who had 
spent their careers the company’s 
business division. She sent them 
Northwestern University’s 18-month 
executive program earn master’s de- 
grees IT. The cost? Nearly $100,000. 


Outside Advantages 

and other employment experts 
are hard-pressed come with stud- 
ies and comparisons between the costs 
building buying management 
skills. Data about the return invest- 
ment for each scenario slim, they 
say, and most infor- 
mation anecdotal. 

For example, 
Goodman uses com- 
panywide matrices 
estimate costs. 
says training and de- 
velopment amounts 
payroll budget, 
while the cost 
hire workers runs 
just under 2%. 

With those costs 
about even, Good- 
man turns the 
other benefits that 
come from external hires. For example, 
they can bring necessary skills 
knowledge organization that 
doesn’t have time build them inter- 
nally, says. 

Others say hiring new managers 
can also infuse organization with 
new ideas, innovative approaches and 
experience markets processes 
new the company. 

Companies that want upgrade the 
level leadership particular role 
might also have more success they 
hire from the market, says Steve Ken- 
drick, president Kendrick Executive 
Resources Inc., an IT executive search 
firm Dallas. addition, companies 
looking for significant change proc- 
esses strategies will likely have more 
success doing they seek manage- 
ment from the outside, says. 

Even those who prefer build man- 
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When executives recently 
gathered discuss their hiring needs, 
took while for anyone begin taiking 
about the technical expertise they wanted. 

fact, “for the first minutes the 
conversation, not one mentioned 
skill,” says Jared Roberts, managing di- 
rector the industry network the 
Pittsburgh Technology Council. 

Members the Workforce Board in- 
stead said they want people who can 
work teams, learn quickly and adjust 
changing situations. They want people 
who understand business. 

“The leader has invariably deliver 
solutions that add measurable business 
value. not, then the business discounts 
them,” says Steve Kendrick, president 
Kendrick Executive Resources. 

Business know-how tops most lists. 
good grasp business and attention 
business details are more important to- 
day than the past,” says Stephen Pick- 
ett, president-elect the Society for In- 
formation Management (SIM) Chicago 
and vice president and CIO Penske 
Corp. Bloomfield Hills, Mich. 

The ability talk money another 
high priority. managers need greater 
understanding costs, budgets and fi- 
nancial management issues, says Diane 
Morello, analyst Gartner Inc. 
Stamford, Conn. They need know about 
cost analysis and return investment. 
“Most businesses tend speak the lan- 
guage money, and most people tend 
outside that circle,” she says. 


agement skills internally readily ac- 
knowledge these benefits. Ellen Barry, 
CIO the Metropolitan Pier and Ex- 
position Authority Chicago, says she 
puts high priority training her 
most talented people and encouraging 
them “to grow into the professionals 
they want become.” 

the other hand, Barry says she 
can’t always wait for that happen. 
Sometimes you need bring new 
talent get the skills that you don’t 
have and can’t rapidly build, she says. 


That leads third skill: the ability 
communicate. managers need 
talk business people, including those 
who sit the board directors. And 
they have everyday language, 
not technical jargon. “You really need 
have the oral and written skills get your 
ideas across,” says David Luce, president 
SIM and Rockefeller Group In- 
ternational Inc. New York. 

managers need learn how 
manage new ways, companies ex- 
pect them work more often with other 
business divisions and across geographic 
distances. also have know how 
motivate people working halfway around 
the world. “Skills around building employ- 
commitment and motivation are big 
time,” says Louise Axon, senior vice presi- 
dent leadership development The 
Forum Corp., Boston-based manage- 
ment consultant and training company. 

this age offshoring and interna- 
tional business, global experience can 
give manager significant edge. Kate 
Marquette University Milwaukee, says 
foreign-language skills, specifically Man- 
darin Chinese Russian, are also helpful, 
global political awareness. 

But none this trumps the need 
stay ahead technology. Umesh 
Ramakrishnan, the Cleveland-based vice 
chairman executive search firm Christ- 
ian Timbers, says managers need 
strategic vision and insight more than 
ever. “The worst thing CIO can im- 
plement strategy that has changed 
again months,” says. 

Two other highly desired skills leader- 
ship and the ability learn will help 
managers tie all those other talents to- 
gether. “To me, the No. capability has 
got leadership. think that’s the 
most transferable all the skills 
going have have,” says Bart Bolton, 
Upton, Mass.-based facilitator for life- 
time learning and the facilitator for 
Northeast Leadership Forum. 
“Leadership the kingpin.” 

Pratt 


Barry has had make the tough call 
not promoting people who 
quite ready for management. those 
cases, she hired experienced, qualified 
managers from the marketplace. Then 
she worked with the internal candi- 
dates make sure they were ready the 
next time manager’s slot opened up. 
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Pratt isa Computerworld contributing 
writer Waltham, Mass. Contact her 
marykpratt@verizon.net. 
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Get Ready for the 
Hispanic Nation 


heard the stats: The fast-growing 
Hispanic population the U.S. 

43.5 million strong, and 12.6 million 
Latinos are already online. Hispanics 
have about $575 billion worth spend- 
ing power and two generations will 
make nearly quarter 
the workforce. 

Are your systems ready? 
Your interactive voice re- 
sponse systems need 
have Spanish-language 
option, your call centers 
should have Spanish-speak- 
ing agents, and your Web 
site needs clear link 


Best Bits 


The most useful parts recent business 
and management books. 

Best Face Forward: Why Com- 
panies Must Improve Their Service 
faces with Customers, Jeffrey Rayport and 
- Bernard J. Jaworski 

School Press, 2005) 
Nicholas Carr would love 
this: a book that says real 
competitive advantage 
will come from superior 


“customer service inter 


faces,” not technology 
But wait, Nick! The 


ay that the key to better 


ding the rigqht camhination 
compinati 


eople are dom 


nk of call centers), while the technology is 


work smarter. And 


sometimes the technology is in the fore 


n the background helping them 


ground 


ng. The people/machine combo could be as 


thing goes 


MANAGEMENT 


content Spanish. 

But only 19% Fortune 100 compa- 
nies offer Spanish-language content 
their U.S. Web sites, according re- 
ports Ron Rogowski, analyst 
Forrester Research Inc. And even Web 
sites that offer some Spanish text fall 
down when comes allowing actual 
financial transactions Spanish op- 
timizing their search engines for Span- 


Los Sandoval haciendo 


Verizon has Spanish-language Web site. 


puters to take fast-food orders when the lines get 
too long, or it could be as complex as Wal-Mart's 
inventory-replenishment system. “In essence, 
Wal-Mart supply chain] machine with hu- 
man face,” the authors say. Probably the most use- 
ful part of the book is the last chapter, which pro 
vides an “interface audit” - a scorecard for rating 
your customer service interfaces 
terms of effectiveness and competitive advantage 


Mitch Betts 


Things Ponder 


@ Privacy already tops the list of consumer worries 
ut radio frequency identification technology, with 


%o of consumers saying they are s' n or 


very concerned about compar FIDt 
monitor transactions and purct its 

onsumers Artafact LLC Fremont, Calif 
and BigResearch LLC Worthington, Ohi 


ir Web analytics software depend on 
s for tracking customer surfing habits? You 
may need to rethink th at rare model now that 
nearly half North Americans own spyware 
moval software and regularly delete the tracking 
cookies, says Chatham, analyst For 
rester Research Inc 


ish queries, Rogowski says. 

But some companies are getting the 
message. Verizon Communications Inc. 
places its Spanish link prominently 
the top its Web page and encourages 
Spanish-speaking call center agents 
promote the Spanish Web site. H&R 
Inc. users can get maps and 
driving directions local offices with 
Spanish-speaking advisers. And Home 
Depot Inc. even remem- 
bered put its privacy 
policy Spanish. 

Among state govern- 
ments, Texas the only 
one provide full-fledged 
Spanish-language Web 
portal for constituents, says 
Rogowski. 

Mitch Betts 


@ Companies that use e-procurement applications 
have reduced the amount of maverick, or off-con- 
tract, spending by an average of 64%, according 
to a benchmarking study by Aberdeen Group Inc 


Boston. 52121 
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The Economy 


Some press reports suggest that 
we're experiencing buyers’ 
market, with demanding and 
getting price concessions from 
their vendors. But December 
2004 survey 100 619% said 
the level discounting ven- 
dors changed and pricing re- 
mains relatively stable, according 
The Goldman Sachs Group Inc. 
New York. One quarter the 
surveyed said discounting 
currently increasing, and 14% 

said discounting decreasing. 


When asked Forrester Re- 
search about their top priorities for 
this year, 868 decision-makers 
North American companies came 
with this top-four list: Deploy up- 
grade major software application, 
upgrade disaster recovery capabili- 
ties, support corporate governance 
(such Sarbanes-Oxley Act com- 
pliance) and upgrade security. 


Buying 
Intentions 


IDC researchers say their index 
business demand (below) shows 
that user spending expectations 
have slipped again. Maybe 
case the winter blues, because 
buyer expectations were low Jan- 
uary 2004, too, and then peaked 
August and have been down- 
ward slide since then, says John 
Gantz, IDC’s chief research officer. 


Business 
Demand, 


1,091 
1,085 1,088 
1,102 


1,075 


1,041 


Aug. Sept. Oct. Nov. Dec. Jan. 


The buyer intent index is based on monthly sur- 
veys of 400 to 500 U.S. CiOs and business ex- 
ecutives, who are asked about their IT spending 
expectations for the next 12 months. Results are 
weighted to be representative of the U.S. mar- 
ket. An index of 1,000 means zero growth. 
Caveat: Buying intentions don't always lead 

to real spending. 


SOURCE. IDC’S FUTURESCAN. 
FRAMINGHAM, MASS.. JANUARY 2005 
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BRAIN 


Get Ready for the 
Hispanic Nation 


You've heard the stats: The fast-growing 
Hispanic population the U.S. 

43.5 million strong, and 12.6 million 
Latinos are already online. Hispanics 
have about $575 billion worth spend- 
ing power and two generations will 
make nearly quarter 
the workforce. 

Are your systems ready? 
Your interactive voice re- 
sponse systems need 
have Spanish-language 
option, your call centers 
should have Spanish-speak- 
ing agents, and your Web 
site needs clear link 


Best Bits 


The most useful parts recent business 
and management books. 

BOOK: Best Face Forward: Why Com- 
panies Must Improve Their Service Inter- 
faces with Customers, Jeffrey Rayport and 
Bernard Jaworski 
(Harvard Business 
School Press, 2005). 
Nicholas Carr would love 
this: book that says real 
competitive advantage 
come from superior 
“customer service inter- 
faces,” not technology. 
But wait, Nick! The au- 
thors say that the key better customer 
service finding the right combination people 
and machines for the situation. 

Sometimes people are dominant the front 
lines (think call centers), while the technology 
the background helping them work smarter. And 
sometimes the technology the foreground 
(think airline ticket kiosks), while people are 
available backup option something goes 
wrong. The people/machine combo could 
simple roaming clerks who use handheld com- 


EXECUTIVE 


content Spanish. 

only 19% Fortune 100 compa- 
nies offer Spanish-language content 
their U.S. Web sites, according re- 

ports Ron Rogowski, analyst 

Forrester Research Inc. And even Web 


sites that offer some Spanish text fall 
down when comes allowing actual 
financial transactions Spanish op- 
timizing their search engines for Span- 


Ondine DSL 


Verizon has Spanish-language Web site. 


puters take fast-food orders when the lines get 
inventory-replenishment system. “In essence, 
Wal-Mart [supply chain] machine with hu- 
man face,” the authors say. Probably the most use- 
ful part the book the last chapter, which pro- 
vides “interface audit” scorecard for rating 
your customer service interfaces 
terms effectiveness and competitive advantage. 
Betts 


Things Ponder 


Privacy already tops the list consumer worries 
about radio frequency identification technology, with 
69% consumers saying they are somewhat 
very concerned about companies using RFID 
monitor transactions and purchasing habits, 
according December 2004 study 8,500 
consumers Artafact LLC Fremont, 

and BigResearch LLC Worthington, Ohio. 

Does your Web analytics software depend 
cookies for tracking customer surfing habits? You 
may need rethink that business model now that 
nearly half North Americans own spyware re- 
moval software and regularly delete the tracking 
cookies, says Bob Chatham, analyst For- 
rester Research Inc. 


ish queries, Rogowski says. 

But some companies are getting the 
message. Verizon Communications Inc. 
places its Spanish link prominently 
the top its Web page and encourages 
Spanish-speaking call center agents 
promote the Spanish Web site. H&R 
Block Inc. users can get maps and 
driving directions local offices with 
Spanish-speaking advisers. And Home 
Depot Inc. even remem- 
bered put its privacy 
policy Spanish. 

Among state govern- 
ments, Texas the only 
Spanish-language Web 
portal for constituents, says 
Rogowski. 


SOURCE: VERIZON 
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@ Companies that use e-procurement applications 
have reduced the amount maverick, off-con- 
tract, spending average 64%, according 
benchmarking study Aberdeen Group Inc. 
Boston. 52121 
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The Economy 


Some press reports suggest that 
we're experiencing buyers’ 
market, with demanding and 
getting price concessions from 
their vendors. But December 
2004 survey 100 said 
the level discounting ven- 
ors changed and pricing re- 
mains relatively according 
The Goldman Sachs Group inc. 
New York. One quarter the 
surveyed said discounting 
currently increasing. and 14% 
said discounting decreasing. 


When Forrester Re- 

search about their top priorities for 

North 
with this top-four list: up- 

upgrade disaster recovery 

fies, support corporate governance 

Sarbanes-Oxley Act com- 

pliance) and upgrade security. 


Buying 
intentions 


researchers say their index 

business demand (below) shows 

that user spending 

have slipped again. Maybe 

case the winter blues, because 

2004, and then peaked 
August and have been down- 
ward since then, says 

Gantz, chief research officer. 


/ 


1,075 


1,041 


The buyer intent index is based on monihly sur- 
veys of 400 to 500 U.S, CiOs and business ex- 
ecufives, who ate asked xbout their IT spending 
expectations for the next 72 months. Results are 
weighted io be representative of the U.S, mar- 
ket. An index of 1,000 means zero growth. 
Caveat: Buying intentions don't always lead 

to real spending. 


SOURCE: FUTURESCAN. 
FRAMINGHAM, MAGS... JANUARY 2008 
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MANAGEMENT 


You Want 


Technical and business 
skills, good judgment and 
good timing will all help, but 
leadership the linchpin. 
JOHN PARKER 


health care organization re- 

cently asked about how 

best achieve his goal be- 
coming CIO. The organization was 
“getting over downsizing,” and 
was planning leaving 
pursue his career. I've been 
giving the question some 
thought, and here’s how 
see it. 

There formula for becoming 
CIO. land the job, four things must 
happen. There has opportunity 
(that is, open position), you must 
the candidate pool, you must dis- 
tinguish yourself from other candi- 


dates, and you must willing take 

the job. 

There isn’t much you can cre- 
ate opportunities, nor can you affect 
their timing, you should avoid the 

temptation try. You don’t want 
reputation oppor- 
tunist, which would vir- 
tually guaranteed stall 
your career growth. hard 
can be, you must patient. 

But while waiting, prepare 
yourself take advantage opportu- 
nities. Decision-makers are typically 
looking for certain personal behaviors 
and experiences they fill open posi- 
tions. You can practice those behaviors 


and pursue jobs that create the ex- 
perience that will help you stand 
out from the crowd. The following 


thoughts may help steer you toward 
your goal. 


Become outstanding leader. all starts 
here. There’s big difference between 
management and leadership. There are 
lot really smart, highly technical 
managers out work right now. But 
for strong leader with back- 
ground particularly with business 
experience opportunity not only 
knocks the door, almost rips the 
hinges off. 

How you become one? You can’t 
become leader reading this article 
book leadership. You have 
live it. Establish set principles 
guide you through tough decisions, 
and develop the courage make 
those decisions and accept the conse- 
quences. Enhance your credibility 
developing track record making 
and meeting commitments. 

Teams voluntarily follow leaders 
because their innate authority, not 
their formal authority, figure out 
how connect with your team 
emotional level. willing tackle 
tough problems, make hard calls and 
accept stretch goals. You and your 


teams will occasionally fail, will- 


ing accept responsibility, recover 


and learn from your mistakes. 


aware that leader, you are 
onstage. Your teams will learn how 
behave from your example, particular- 
during tough times. You set the tone 
for your organization’s culture and val- 
ues, make sure you model the be- 


haviors you want see your people. 


Good CIOs don’t run technology 
shops; they run businesses. The best 


serve key members the executive 


team running their firm’s core busi- 
ness. credible within the 
group, you must have good grasp 
technology, and you will most effec- 
tive you have actually done some 
jobs. The same true with the busi- 
ness community. you don’t have 
business background, going back 
school for MBA will help, but run- 
ning with the business units will 
least valuable. Learn their language. 
Understand their strategies. Figure 
out what they are worried about and 
where they see opportunity, then de- 
velop ways use technology help 
them out. 


Get intimate with the numbers. The lan- 
guage business money, and you 


MANY AMBITIOUS PEOPLE jump 
the first “title” they can get. This often 
mistake. When viewed over two 
three decades, your career will turn out 
much better you look for opportunities 
that allow you grow and add value, 
rather than being title-focused. These 
ideas will help you stay track: 

Pick company for which critical. 


Look for projects that result bottom- 
line benefit. 


willing move not just 
vertically, work those projects. 


Realize that bigger companies will likely 
grow your experience faster than 
companies. management po- 
sition large company should provide 
opportunity learn, grow and lead 
than position small company. 


Make sure you're going something 
you like, not running away from some- 
thing you don't. during hard times 
that strong leadership most needed. 
The best opportunity could stay 
right where you are and build better 
future. 


variety settings, building base 
experience several areas such ap- 
plication development, vendor manage- 
ment, computer operations and, ideally, 
some business functions. 

John Parker 


don’t understand how money made 
and spent your company, you 
make the CIO level. effectively 
communicate with your CEO, board 
directors, executive committee and 
chief financial officer, you must know 
what drives your company’s costs and 
how manage them. service pro- 
vider within your organization, or- 
der successful, need un- 
derstand not only the budget, but 
also every business unit’s budget. 

Finally, remember the old adage, “Be 
careful what you wish for, because you 
might get it.” Becoming CIO can 
extremely rewarding opportunity 
for the person who ready. But some- 
one who prepared himself can 
feel like dog who finally catches that 
truck he’s been chasing only get 
run over it. all you can get 
ready for the role, and then enjoy. 
can promise you boring. 
Good luck. 51985 


Parker executive vice president and 
CIO A.G. Edwards Sons Inc. You can 
contact him jparker@agedwards.com. 
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there more opportunity for 
career growth quality assurance 
software development? What 
are the future prospects for 
ity assurance position? will make 
two assumptions: that you are already 
the technology field and that you realize 
that the software developer and quality 
assurance engineer roles are very 
ent. fact, believe that they require 
very different characteristics. urge you 
consider whether you have passion 
for one role the other. 


believe that the prospects for 
professionals are very good. According 
statistics released 2002 the Na- 
tional Research Council, U.S. companies 
spent $175 billion 2001 repair dam- 
age caused software defects. Com- 
panies are realizing that investment 
quality assurance will have measurable 
impact the bottom line. result, 
see many enlightened companies in- 
vesting training for quality assurance 
engineers, tools and hardware envi- 
ronments. exciting and satistying 


just graduated with bachelor’s 
degree computer engineering 
technology. have very little expe- 
rience the field. Where should 
have the best chance 
entry-level There are several 
approaches take when seeking your 
first job particular field. Many uni- 
versities offer job placement 
ing, since they are familiar with the pro- 
fessional firms the area. encour- 
age you explore that option. 

Second, don't undersell yourself 
you craft your résumé and begin the in- 
terview Many employers are 
looking for intelligent candidates who 
have shown initiative and are good fit 
with the culture. Consider how lever- 
age project assignments you've done 
part your course work. Convey the 
unique qualities that will make you like- 
contributor future em- 
ployers. And finally, network. Talk 
friends and fellow graduates, and attend 
job fairs. Most employers realize that the 
best candidates come way referrals 
from their current employees. 51894 


Quality assurance/testing manager 
Disaster recovery specialist 
internet/intranet developer 
Business systems analyst 


Job Market Roundup 


THE STATE THE JOB 
MARKET MAY DEPEND 
WHOM YOU ASK. 

the new year began, contradictory 
assessments the market were is- 
sued from various quarters. Most were 
least partially positive outlooks, but 
that hardly added unanimity. 

Janco Associates Inc. Park City, 
Utah, last month released its 2005 
Comparative Salary Survey, saying 
that there was small decrease de- 
mand for technology professionals and 
drop just under mean total 
compensation during the last six 
months 2004, despite renewed 
spending many segments the 
market. also said that the outsourc- 
ing jobs continues have neg- 
ative effect the U.S. and Canadian 
job markets, the two countries covered 
the study. The bright spot the 
study concerned especially 
those large companies; their mean 
compensation rose more than 
during the period studied. 

Also last month, staffing firm Hud- 
son Global Resources reported that its 
index job confidence among 
workers rose 6.9 points Decem- 
ber 116.3, increase fueled 
workers’ belief that hiring and lay- 
offs are declining. 


THAT CONFIDENCE 
WELL-FOUNDED? 

The U.S. Department Labor report- 
that December, the U.S. econo- 
added 9,700 payroll jobs the 
area computer systems design and 
related services, bringing the total 
1.16 million. Jobs this field have been 


the rise since April and are 
57,300 positions since December 
2003. And employment services firm 
Challenger, Gray Christmas Inc. said 
that U.S. companies last year laid off 
23% fewer workers than they did 
2003 and 62% fewer than 2002. 
Nonetheless, Challenger also found 
that employment the high-tech in- 
dustry still flux, with job losses 
the industry totaling 176,113 2004 
and accounting for 17% all job cuts. 


SO, STORE? 
One forecast comes from Robert Half 
Technology. Its 2005 Salary Guide 
51675] predicts that aver- 
age base pay for professionals over- 
all will rise this year. But certain 
positions will see greater-than-average 
increases. Leading that group (see 
chart below) are systems auditors, 
whose base compensation Robert Half 
expects increase 5.1% 2005, 
the range $63,250 $81,750 
annually. Systems auditors assess and 
document the capabilities existing 
systems advance hardware and 
software upgrades, and demand for 
them being driven the need 
comply with the Sarbanes-Oxley Act, 
the Gramm-Leach-Bliley Act and other 
regulations. And according the 
Robert Half Technology Hiring Index 
and Skills Report, 11% executives 
polled plan add staff early this 
year, while anticipate cutbacks. 
The net hiring increase three 
percentage points from the previous 
quarter's forecast and six percentage 
points from the year-earlier projection. 
Jamie Eckle 


Systems auditor 5.1% 
Pre- and postsales consultant 3.9% 
Programmer/analyst 3.6% 
2.6% 
Network security administrator 2.3% 
Data security analyst 


MENLO PARK. CALIF 


SOURCE ROBERT HALF TECHNOLO 


' 
' 
' 
' 
eer ' 
a ' 
' 
a 
' 
' 
' ' 
' 
' ' 
' 
' ' 
' 
1 

2.0% 


www.computerworld.com 


Outsourcing 

Feb 21-23, San Diego 

Sponsor: Michael Corbett 
Associates Ltd. 

Topics the 2005 Outsourcing World 
Summit include assessing your op- 
tions, managing and governing strate- 
gic relationships, selling outsourcing, 
improving enterprise efficiency, global 
sourcing, launching provider compa- 
ny and win-win strategic partnerships. 
www.corbettassociates.com/ 
content/10/78/250/ 


Wharton Event 


Feb. 25, Philadelphia 

Sponsor: Wharton School, 
University Pennsylvania 

Topics the 2005 Wharton Technology 
Conference include nanotechnolo- 
digital media, open-source for the 
consumer, venture capital opportunities 
and advice for technology start-ups. 
www.whartontechconference.com 


ISO 9000 


Feb. 28-March Orlando 
Sponsor: ISO 9000 Institute 
Topics the 2005 International Con- 
ference ISO 9000 include strate- 
gies for performance and Six 
Sigma and ISO 9001; systems ap- 
proach planning, measurement and 
improvement; and tools and methods 
for improving quality management. 
www.iso9000conference.com 


Metamorphosis ’05 


March 1-3, San Francisco 
Sponsor: Meta Group Inc. 

Tracks this 16th annual forum include 
sourcing, applications, mastering 
lations and standards, measurement 
and modeling, risk and business conti- 
nuity, and leadership strategies. 
www.metagroup.com/us/events.do 


Technology 


March 2-4, Marina del Rey, Calif. 
Sponsor: The Conference Board Inc. 
The Strategic E-HR Conference in- 
presentations using technol- 
ogy transform human resources 
strategic function, leveraging em- 
plovee portals, and virtual systems for 
career development and coaching. 
www.conference-board.org/ 
conferences 
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Obligations 


came with standard API? 

interface specifications and know 
exactly what expected, what 

format expected it, when you should deliver it, what 
predictable events would result from your input and 


how you should handle er- 
ror conditions. All the poli- 
tics would away. Those 
pesky emotions would be- 
come nonissue. Success 
would become deterministic. 

Sadly, will never 
simple. Every boss-subordi- 
nate connection cus- 
tom job. This both the 
promise and the pain 
workplace relationships; 
they are cobbled together 
not hardware soft- 
ware, but wetware (the 
gray, squishy stuff between 
our ears). 

The complaints about 
this are endless from the 
subordinate side. don’t 
know what wants, and won’t tell 
me.” “She doesn’t really understand 
what do, she can’t tell what she 
expects.” “He tells one thing, and 
then when give him, changes 
his mind.” “She says that have atti- 
tude problem, but don’t really know 
what that means.” 

turns out, the inability forge 
easily understandable, straightforward, 
repeatable relationships just frus- 
trating for bosses for subordi- 
nates. Supervisors would love able 
clearly articulate exactly what they 
expect that all their people would 
understand. Sadly, many managers erro- 
neously believe that they have clearly 
defined and communicated their expec- 


thor of the award-winning 


tations, and they just can’t 
figure out why one else 
seems get their vision. 

I’ve developed rather 
simple philosophy boss- 
subordinate relationships. 
Although not detailed 
specification, has served 
well both manager 
comes two parts. 

Part subordinate 
owes the boss and the or- 
ganization three simple 
things: 

Candor 

Loyalty 

Delivery 

That’s it. deliver 
all three those things, 

can look myself the mirror and 
feel that I’ve fulfilled part the 
employment bargain. Let’s take quick 
look each one, because they are 
deceptively simple. 

Candor. owe the boss honest opin- 
ions about important things the job. 
knowledge workers, are not 
hired for our muscle power; are 
hired for our brain power, owe 
the boss share the fruits our 
thought. That doesn’t mean that 
blather about every fleeting neural 


Geeks: 


discharge, but something impor- 
tant, need share our perspective. 


WANT OUR OPINION? 


Sometimes, this can unpleasant 
obligation. Disagreeing with the boss 
not always fun. Some managers are 


not open other opinions. 
Some are too insecure accept them. 
Some believe that power confers wis- 
dom and that they don’t need listen 
anyone else. But the boss’s recep- 
tiveness doesn’t affect the obligation. 
project running aground, some- 
one has speak before it’s too late. 

Loyalty. I’m not talking about the 
blind fealty medieval vassal his 
master, but rather reasonable mod- 
icum this uncommon virtue. 

Ultimately, part every manager’s 
job make decisions. This includes 
making hard choices that may upset 
people. manager never ticks any- 
one off, probably shirking his re- 
sponsibilities. have shared our 
opinions with our manager and 
makes decision don’t agree with, 
are obliged get over and im- 
plement his choice. should not 
spend endless hours trying change 
things post hoc or, worse, trying 
secretly undermine the decision. 

course, there are exceptions 
the loyalty rule. what the boss has 
dangerous patently self-serving, 
loyalty ends there. 

Delivery. And finally, when 

Part Bosses owe their subordinates 
three simple things too: 

Candor 

Loyalty 

Delivery 

Although not detailed API, this 
simple understanding can long 
way toward smoothing relationships 


and directing successful careers. What 


owe one another the workplace 
may vast, but some ways 
quite simple. 52033 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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U.S. ARMY WAR COLLEGE Seeks Visiting Professor of Instructional 
Design. The U.S. Army War College seeks a Visiting Instructional 
Designer for the academic year 06-07. The successful candidate will be 
hired under the provisions of the Intergovernmental Personnel Act which 
governs the temporary assignment of personne! between the federal gov- 
ernment and state and locai governments and institutions of higher learn- 
ing. The selected candidate will be responsible for designing/developing 
innovative case studies, simulations, prototype educational applications 
and curriculum enhancement tools. Must be conversant with emerging 
educational concepts and technology and act as an advocate and prima- 
ry researcher for educational technologies and related instructional 
methodologies. Must have significant experience and expertise in explor- 
ing and exploiting educational technology to enhance education, prefer- 
ably at the graduate or undergraduate level. This should include working 
knowledge of the most current educational technologies, applications 
and related instructional methodologies. Possess demonstrated ability to 
prepare, coordinate, supervise, teach, and lecture on subjects relating to 
educational methodologies and technologies in order to provide faculty 
development and student training or education. Demonstrate ability to 
manage or supervise in a graduate level academic program. The appli- 
cant will also advise Department of Distance Education faculty on the inte- 
gration of new technologies/methods to enhance and reinforce student 
learning. An earned doctorate in a science or technology field of study 
with experience in professional military education is preferred but not 
required. The term of service which begins 1 August 05 is for one year. 
Applicants should submit a letter of interest to Or. Clayton Chun 
Chairman, Department of Distance Education, U.S. Army War College, 
ATTN: ATWC-ADE, 122 Forbes Avenue, Carlisle, PA17013-5240 or e- 


mail to clayton.chun@carlisle.army.mil 


For full consideration, applica- 


tions must be postmarked by 15 March 05. 


Siebel Systems, inc. has 
employment opportunity in 
Sandy, UT. 

Analyst DBA: Use engineering 
technology knowledge for large 
database systems to support the 
planning, coordinating and 
administering of computerized 
databases. Apply knowledge of 
database administration and 
management to review technical 
base definition, structure, docu- 
mentation, long range require- 
ments, operational guidelines 
and protection. Ensure the tech- 
nical accuracy and complete- 
ness of data in computer master 
files and various support tolis 
such as base dictionaries. Use 
computer engineering knowl- 
edge to install and maintain 
security and integrity tools for 
large databases. Provide techni- 
cal assistance on informing and 
updating policies, procedures 
and standards relating to data- 
base management. Applying 
knowledge of DB2 UDB, SQL 
server development and demon- 
strated technical skills to ana- 
lyze issues with the company's 
database systems. Req. BS in 
CS, CE, EE, Math, MIS 
Physics, Business or related 
field with 2 years experience as 
Database Administrator, Data- 
base Developer or Senior 
Consultant. Apply online at 
http://www.siebel.com/adresum 
e or forward your resume refer- 
encing CP0105 to Siebel 
Systems, Inc. Attn: Corporate 
Recruiting, 2207 Bridgepointe 
Parkway, San Mateo, CA 
94404. EEOE 


Thomson, Inc. is seeking a 
Hardware Engineer, Senior 
Member of Technical Staff, to 
design and develop front end for 
Digital Satellite Receiver, devel- 
op front end solutions using 
Zero IF tuner ICs for digital 
Satellite receivers, conduct vari- 
‘ous analysis for F-type connec- 
tors involving S-parameter mea- 
surements for impedance 
matching, and perform several 
tolerance and supply ripple 
analysis related to the design 
phase. Must have a Master's 
degree or equivalent in Elec- 
tronics, Communications, or 
Electrical Engineering plus 3 
years of progressive experience 
in electronics and communica- 
tions engineering. In lieu of 
Master's degree plus 3 years of 
experience as described, em- 
ployer will accept a Bachelor's 
degree in Electronics, Commun- 
ications, or Electrical Engineer- 
ing plus 5 years of progressive 
experience in electronics and 
communications engineering 
Salary commensurate with ex- 
perience. Please send cover let- 
ter and resume to: HR - Job # 
9000, Thomson inc., 10330 N 
Meridian St., Indianapolis, IN 
46290 
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DEVELOPMENT TEAM 
SUPERVISOR 


Sensormatic Electronics Corpor- 
ation has an opening in Boca 
Raton, FL for a Development 
Team Supervisor. 


Responsible for day-to-day acti- 
vities of a team providing web- 
site development and internet 
application development ser- 
vices. Act as key contact for end 
users. Lead joint application 
development and manage out- 
sourced development relation- 
ship. Coach, teach, train and 
guide the team in all phases of 
the development process. Help 
identify and evaluate any em- 
erging technologies. Work with 
open source tools and technolo- 
gies 


Must possess at least a bache- 
lor's or its equivalent in Comput 
er Science, Electrical Engineer- 
ing or a related field and relevant 
work experience, including work 
experience with the following 
advanced programming con- 
cepts, algorithms, data struc- 
tures and object oriented tech- 
niques; code debugging, inte- 
gration debugging, application 
configuration and development 
environments; open source tools 
and technologies; and Resin 
Apache, Java and Linux 


Resume and/or cover letter 
must reflect each requirement 
above and specify reference 
code DTS/CJP or it will be 
rejected 


Forward resume to Nella 
Nabhan, HR Administrator - TFS 
HQ, Tyco/Fire & Security, One 
Town Center Road, Boca Raton. 
FL 33486-1010 


Programmer Analyst - 
Coldfusion/Web Developer 


Multiple positions available to 
analyze user requirements, pro- 
cedures, and problems to auto- 
mate processing & improve 
existing computer system 


Requirements: Masters degree 
in Com. Science, Engineering or 
related field. Must possess 2 
yrs. work exp. in position offered 
or in developing and analyzing 
Web application programs. 
Must be knowledgeable & profi- 
cient with Web development 
technologies, including Cold- 
fusion, Java Script, XML and 
HTML. Must be exp. with writing 
compiex SQL queries related to 
database. Must be exp. with 
designing, developing & deploy- 
ing Internet and/or web-based 
technologies software 
Must be willing to travel fre- 
quently for short/long term 
assignments at client sites 
Replies with Ref. Code’ 
CW2005cold via email (nan- 
dan@cogentinfo.com), or mail 
(Nandan Banerjee, Cogent 
Infotech Corp., 2581 Wash- 
ington Rd., Suite 232 B, Pgh., 
PA 15241) 


SENIOR BUSINESS 
SYSTEMS ANALYST (IT) 


Sensormatic Electronics Corpor- 
ation has an opening in Boca 
Raton, FL for a Senior Business 
Systems Analyst (IT). 


Work with customers to define 
business requirements to bridge 
gap b/tw business and technolo- 
gy. Coordinate projects through- 
out the life cycle to ensure the 
business needs are met without 
exceeding constraints. Work 
with open source tools and tech- 
nologies. Aid in the creation of 
proposals by identifying 
resources, needs and availabili- 
ty in order to set and meet the 
expectations of all project partic 
ipants. Perform vendor/soft- 
ware/hardware evaluations 


Must possess at least a bache- 
lor's or its equivalent in Comput- 
er Science, Electrical Engineer- 
ing or a related fie'd and relevant 
work experience, including 
classroom training and/or work 
experience with open source 
tools and technologies, Resin 
Apache, Java and Linux 


Resume and/or cover letter 
must reflect each requirement 
above and specify reference 
code SBSA/VBG or it will be 
rejected 


Forward resume to Nella 
Nabhan, HR Administrator - TFS 
HQ, Tyco/Fire & Security, One 
Town Center Road, Boca Raton 
FL 33486-1010 


Programmer Analyst - 
Microstrategy 


Multiple positions available to 
analyze user requirements, pro- 
cedures, & problems to auto- 
mate processing & improve 
existing computer system 


Requirements: Masters degree 
in Comp. Science, Engineering 
or related field. Must possess 2 
yrs. work exp. in position offered 
or in developing & analyzing 
programs related to database. 
Must be exp. with business intel- 
ligence reporting tools, including 
Microstrategy. Must be exp. in 
writing SQL (using Toad) on 
Oracle 8i/9i. Must be exp. in 
data modeling & applying report- 
ing tools to data mart. Must be 
willing to travel frequently for 
short/iong term assignments at 
client sites. Replies with Ref 
Code CW2005micro via email 
(nandan@cogentinfo.com), or 
mail (Nandan Banerjee, Cogent 
Infotech Corp., 2581 
Washington Rd., Suite 232 B 
Pgh., PA 15241) 


Software Engineers need- 
ed. Seeking qual. candi- 
dates w/ BS or equiv. &/or 
rel. work exp. Part of req 
rel. work exp. must include 
3 yrs working w/ Unix shell 
scripting (Korn), Oracle & 
MicroFocus COBOL. Duties 
include: software dev, test- 
ing & client support. Fwd 
resume & ref. to Remote 
Computing Systems, Inc., 
9017 Bluestem, Wichita, KS 
67207. 


SYSTEMS SOFTWARE ENGI- 
NEER to provide on-site consul- 
tancy to analyze, design, devel- 
op and implement systems soft 
ware in web architecture using 
Java, JSP, Serviets, CORBA. 
PL/SQL, Jbuilder, WebMethods 
and RDBMS, Oracle, OB2 and 
WebSphere in AlX/Solaris and 
Windows environment. Require 
B.S. (or equivalent) in Engineer- 
ing/Computer Science and 5 
years experience. 40% travel to 
client sites within the U.S. re- 
quired. Competitive salary and 
benefits. Mail resume to: Human 
Resource Manager, 4C Solu- 
tions, Inc., 1201 7th Street, East 
Moline, IL 61244 


Auto-Trol Technology Corp- 
oration seeks applicants for the 
position of Software Engineer in 
Denver, CO, to, under close 
supervision, engage in moder- 
ately complex tasks regarding all 
aspects of the software develop- 
ment life cycle from requirement 
gathering to design, implemen- 
tation, testing and documenta- 
tion for a range of products 
involving technical illustrations 
Position requires bachelor's 
degree in computer science and 
working knowledge of graphics 
systems programming, linear 
algebra, design and analysis of 
algorithms object-oriented 
methodologies, Axonometric 
and Perspective systems, C and 
Visual C++ programming lan- 
guages and development and 
maintenance of test scripts on 
WinRunner or similar tool 
Respond by resume to Lisa 
Jayne, Auto-Troi Technology. 
12500 N. Washington St 
Denver, CO 80241. (Reference 
Ti Advertisement) 


SAP Information 
Systems Specialist 


Valero, inc. has position opening 
for SAP Information Systems 
Specialist. The Information Sys- 
tems Specialist will be responsi- 
ble for analyzing requirements. 
design, development and testing 
of a seamless integration pro- 
cess. Must have B.S. degree in 
engineering, comp sci or related 
degree (foreign degree equiva- 
lent accepted) w/ 2 years in 
position or as software develop- 
ef, programmer or consultant 
Please forward resume to 
Jennifer Moreno, One Valero 
Way, San Antonio, TX 78249 
No email or telephone inquiries. 


IT Market Analyst needed to cre- 
ate & analyze corporate strate- 
gy. performance & prospects of 
business segments in IT ser- 
vices; prep & eval plans & bud- 
gets; analyze cost structures 
performances & variances; mon- 
itor portfolios incl strategy formu- 
lation, eval M&A opportunities. 
fund raising, recruitment & busi- 
ness dvipmt. Resume to Global 
Consultants, Attn: Hireme, 25 

Rd, Morristown, NJ 


Lead Software Engineers 


AEBN, Inc. has_ position 
opening for Lead Software 
Engineers, Level |, ll. Will 
design/architecture and de- 
velop software applications. 
Must have M.S. degree in 
computer science w/ 1 year 
in position for Level Il and 3 
years for Level |. Please for- 
ward resume to: Brian Ziel, 
5300 Old Pineville Road, 
Suite 160, Charlotte, NC 
28217. No email or tele- 
phone inquiries. 


EDI Analyst/Web Devel- 
oper. BS in Info Systems or 
Comp Sci + 5 yrs exp OR 
MS plus 2 yrs exp. Exp to 
include JAVA & internet-ori- 
ented programming or dev, 
EDI translation tools & ANSI 
X12 standards; dem knowl- 
edge of HTML, TCP/IP, 
FTP, SMTP, POP, HTTP 
protocols, GUI design prin- 
ciples. Send resumes to 
Staffing, PO Box 657, Des 
Moines, lowa 50303. 


Computerworld InfoWorld Network World February 2005 


Hetrosys, LLC, based in Detroit 
MI seeks Software Engineer for 
Detroit and nationwide opportu 
nities. Requirements include 
Master's degree or foreign 
equivalent in Computer Science 
Information Technology or relat: 
ed field and three years experi- 
ence designing and developing 
J2EE Web-based software 
applications Position also 
requires one year experience 
working with Struts Open Source 
Web application framework 
integrating IBM Main Frame 
applications using IBM Web- 
sphere Application servers 
developing Web services and 
implementing service-oriented 
architecture. Apply via U.S. Mail 
with resume to Hetrosys, LLC 
3757 S. Baldwin Rd., #223 
Lake Orion, MI 48359. 


Network/System Administrator 
wanted to maintain & upgrade 
network, & develop & maintain 
web site & e-commerce solu- 
tions. Must have Bach. in 
Comp. Sci. or related field, & 2 
yrs network & systems eng 
exper., incl. configuring & main- 
taining routers, firewalls, WAN 
technologies & deploying Auth- 
entication & File Servers over 
Windows 2000 client-server 
environ. & incl. exper. with Linux 
server platforms, MS Exchange 
Mail server & Network Security. 
Proficiency in Windows 2003 
server, Novell Netware client 
server & ASP/VB.Net/SQL serv- 
er 2000 programming. Send 
resume to HR, Adaptive 
Instruments Corp., 577 Main 
St., Hudson, MA 01749 


Database Admin - engage in 
database design & admin; web 
design; recovery & backup plan- 
n'g & implementation; & user 
access. Design sites for search 
engine optimization. Write & 
design server architecture. Train 
system users. Analyze, review & 
alter prog.s. Project developmt 
35 hrs. B.S. in Computer Sci or 
Computer Bus Applics. 2 yrs exp 
in job offd. Fax resume & salary 
reqmts to (727) 544-4386, Attn 
Ms. Dore-Falcone, GeoPharma 
Inc 


Accounting Consultant needed 
w/Bachelors or Foreign Equiv in 
Accntg, Fin or Bus. Admin & 1 yr 
exp to analyze & compile fin 
Info to summarize current & pro- 
jected company fin. reports. 
Examine, analyze & interpret the 
liquidity ratios of corporate cus- 
tomers. Prepare cost profit 
analysis & prepare cash flow 
statements, budgeting & fore- 
casting using Oracle Financials. 
MS Excel, Dbase, Lotus 1-2-3 & 
Peachtree. Send to 
Wireless 4 U, Inc. 15028 
Manchester Road, Ballwin, MO: 
63011 


Senior Software Engineers 
needed. Seeking qual. candi- 
dates with MS/BS or equiv. 
and/or rel. work exp. Part of the 
req. rel. exp. must include 2 yrs: 
working w/ J2EE & SQL Server. 
Duties incl design & develop 
web-based software for service 
industry & provide software sup- 
port, including unit testing & 
debugging code. Travel & relo- 
cation may be required. Fwd. 
res. & ref. to: Sysnet Technology 
Solutions, Inc., Attn: HR, 20380 
Town Center Lane, Suite 166, 
Cupertino, CA 95014. 


Software Engg Needed 
Seeking qual. candidates pos- 
sessing MS/BS or equiv. & rel 
wrk exp. Part of the req. rel. exp. 
must include 3 yrs. working w/ 
ADS/O & MQ Series & 3 yrs 
applying Six Sigma Process in 
the IT solutions. Exp. can be 
simult. Duties include: Design & 
dev. soft. app. Apply Six Sigma 
Process to ensure quality. Wrk 
wi ADS/O, LRF, IDDM 
Easytrieve, IDMS & MQ Series 
Travel & relocate may be 
necess. Fwd. res. & ref. to 
Saitech Corp. 1215B Duane 
Swift Pkwy, Jefferson City, MO 
65109. 
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Systems Analyst/Programmer 
Consulting: Must have a Mast 
er's degree or equivalent in 


A position is available for a 
Senior Technical Advisor for a 
software developer in the heaith- 


Computer Professionals 
(Multiple Openings) 


Systems Analyst/Programmer 


Senior Development Engineer 
Consulting: Must have a Mast 


(multiple openings). San Jose 


Technology Company seeking 
Programmer Analyst and Senior 


er's degree or equivalent in CA. Rea fact, P, ner Ar f Ayjiter 
eq. Master's degree (or rogrammer Analyst for Multiple 

Senior Software Engineer The Computer Engineering, Comput Computer Engineering, Comput ‘ gs. Positions Req 
Programmer Analyst) Systems care industry company Is er Science, Information Systems ‘er Science, information Systems loreign equiv) in comp. science Openings ‘ositions Require 


located in Durham, North 
Carolina, but the job can be per. 


or Engineering and 3 years 
experience as a Programmer 


Analyst) Database Admin- 
istrator, Software Engineer, 


or comp. eng. & 2 yrs. of exp. in ments vary and environments 
the job offered or 2 yrs.’ exp may include Actuate, Siebel 


or Engineering and 3 years ex 


Programmer Analyst/Systems 
Analyst/ Database Administrator 


Must have masters or equivaient 
degree for senior positions. 
Bachelors degree and/or experi: 
ence in computer science, engi- 
neering or related field and 
experience in some of the fol- 
lowing skills 


formed from anywhere in the 
United States. The Senior 
Technical Advisor will be primar- 
ily responsible for providing 
technica! expertise in resolving 
difficult or complex problems 
escalated from support staff 
Specific responsibilities include 
testing network utilization of 


Analyst (will also consider B.S 
degree and 5 years of progres 


degree and 3 years of experi 
ence) the experience must in 
clude the design, development 
implementation and mainte 


technologies such as COBOL 


Sive experience in the field as 
the equivalent to a US Master's 


nance of multi-tier client/server 
systems utilizing sophisticated 


perience as a Programmer An 
alyst or Systems Engineer (wil 


also consider B.S. degree and 5 
years of progressive experience 
in the fieid as the equivalent to a 
US Master's degree and 3 years 
of experience) the experience 


must inciude the design, devel 


opment, and implementation of 
highly complex information sys- 


tems utilizing sophisticated tech 
nologies such as COBOL, CICS 


lieu of Master's degree, w 


equiv.) & 5 yrs’ progressive post 
baccalaureate exp. as stated] 1 


using network protocols in ker. 


embedded solutions design 


performing C dev. in Linux. [In 


accept Bach. degree (or foreign 


yr. of stated exp. must include 


nel; & util. real time, zero copy & 


SAP, Informatica, J2EE, Web 
Sphere 


Programmer Analyst 

require the minimum 
Bachelor's Degree in 
Engineering/Electronics + 3 year 
experience in position offered or 
related position 


Must pass company's technica! 
review. Research, design, devel Senior Programmer Analyst 
op & maintain key elements of 


products in lab conditions and 
on customer's networks and 
reviewing and approving 
changes to client data and pro- 
grams. Candidates for this posi- 
tion should possess an associ 


Microsoft Technologies (Visua! 
Basic, NET, ASP), C/C++, Java 
Cold Fusion; CRM (Siebel 
Clarify); ERP (SAP, PeopleSoft 
Oracle Apps) Middleware 
Technologies (Orbix, Corba 
Tibco, Vitria); Datawarehousing 
Tools (informatica, Data Stage. 


CICS, DB2 AM, Endeavor DB2, Endeavor, JCL and SQL 
JCL and SQL/QMF, File-Aid QMF on IBM mainframe operat 
Xpeditor on IBM mainframes ng systems. Responsible for the 
Responsible for the design, de design, development and imple advanced, multi-user enterprise 
velopment. implementation and mentation of highly complex & server provider applications 
maintenance of highly complex nformation systems. Work with for IP telephones & mobile 
multi-tier client/server systems client management to analyze 
business requirements and id 


positions require the minimum of 


a Masier’s Degree in Computer 
Science/Engineering/Electronic 
Ss or related field In lieu of 
Master's Degree, Bachelor's 


devices. Forward resume by e 


2d technolo. 


Abinitio, Business Objects 
Cognos, Micro Strategy, Brio) 
Mainframe (Cobol, CICS, JCL 
VSAM) AS400 Quality 
Assurance (Win Runner, Load 
Runner, Silk, Quickpro, Manual 
Testing) Databases/ Admini- 
stration (SQL Server/ Oracle/ 
DB2/Sybase); MS Windows 
(95/98/NT/ 2000, XP, Exchange) 
UNIX (Sun Solaris, HP, AIX) 
Linux 


Work Location: Maine and/or 
any unanticipated location in the 
U.S. (must be able to travel or 
relocate nationwide). Attractive 
compensation package. 40 
hrs/week 


Mail your Resume to 
hr@gamatech.com Human 
Resources Director, Gamatech 
Inc, 477 Congress Street, 5th 
Floor, Portland, ME 04101-3427 


Computer Scientist 


Responsible for R&D of hard- 
ware & software formal verifica- 
tion framework. Duties include 
design & implementation of for- 
mal specification language, new 
automated verification algo- 
rithms; overall system infrastruc- 
ture; perform research in formal 
methods area; write research 
papers & technica! reports. This 
position requires Ph.D. in CS 
with doctoral dissertation em- 
phasis in software engineering & 
formal methods for analysis & 
verification of software & hard- 
ware systems. Research back- 
ground to include: design, imple- 
mentation; use of model check- 
ers, static analyzers, compilers 
software verification; implemen- 
tation & design skills including 
object technology; programming 
skills including C++, Scheme 
Emacs-Lisp, & Java; working 
knowledge of automatic theorem 
proving & formal semantics of 
programming languages. This 
position is located in Menlo 
Park, CA. Please apply, indicat- 
ing job# 2251, via our website @ 
www.sri.com or mailing address 
at 333 Ravenswood Ave, Menio 


Software Engineer 


Specify, design, develop, and 
test embedded controi systems. 
software and hardware design 
simulation, modeling, develop- 
ment, testing/debugging, inte- 
gration, validation & documenta- 
tion.Required: must have Bach- 
elor's Deg. in CS, E/E, or Tech- 
nology related equiv. degree; 10 
years exp. in job offered, Exp. w. 
programming embedded contro! 
systems in C++ 8051 Assembly, 
& VHDL languages, as well as in 
PC 104-based Linux; Exp. w 
direct hardware-level program- 
ming & circuit design; w/ hard- 
ware-level device drivers & pro- 
grammabie logic; Exp. w/ bench 
development of hardware-level 


ate degree in Engineering 
Technology or a related field and 
at least 1 year's experience pro- 
viding technical support in the 
healthcare industry including 
Novell, UNIX, and Btreive; plan- 
ning, installation, configuration 
and support of network infra- 
structures (LAN/WAN, FDDI, or 
cable); network naming, poli- 
cies, and conventions (TCP/IP 
tables); and database program- 
ming. Apply with resume by mail 
to: Shelley Ayers, Per-Se 
Technologies, Inc., 300 West 
Morgan Street, Suite 175 
Durham, North Carolina 27701 


SOFTWARE ENGINEER to 
design, develop, test and main- 
tain client/server and n-tier 
applications on Windows and 
UNIX platforms using C, C++ 
VC++, Visual Basic, Activex 
COM, Java, Serviets, SQL XML 
Technologies, Object Oriented 
Design and Analysis, UML 
Data Modeling, Distributed 
Databases, and IIS; Design 
and develop database driven 
applications for the transporta- 
tion, public health, environmen- 
tal Require: Master's degree in 
Computer Science/ Eng- 
ineering, or a closely related 
field; Must have a demonstrat- 
ed ability to perform the stated 
duties gained through academ- 
ic coursework/ previous work 
experience Extensive trav- 
el on assignment to various 
client sites within the U.S.is 
required Competitive salary 
offered. Send resume to: Ayan 
Sengupta, US Computing, Inc. 

2927 Devine Street, Suite 200 
Columbia, SC29205; Attn: Job 
AY. 


A position is available for a 
Quality Engineer Analyst II in 
Atlanta, Georgia with a technolo- 
gy solutions company. The Qua- 
ity Engineer Analyst |! will be 
primarily responsible for devel- 
oping, designing, and imple- 
menting tests and evaluating 
results for all product compo- 
nents. Specific responsibilities 
include creating test paradigms. 
developing regression tests and 
associated code, developing 
test suites, performing crash 
testing, stress testing, and error 
conditioning testing. Candidates 
for this position should possess 
a Bachelor's degree in Comput- 
er Science or a related field and 
at least 2 years’ experience with 
relational databases including 
SQL, regression, integration 
functional and stress testing 
writing test plans, test scripts 
and technical documentation 
Windows operating systems and 
issue tracking software; and 
demonstrated knowledge of C 


utilizing sophistic 
gies such as BOL, DB2 
VSAM, CICS, JCL, SQL/QMF 


on IBM 08/390 mainframe oper 


specify complex business re 


performance and mode! testing. 
report generation, troubleshoot 
ing, debugging and coding 
Participate in process design. 


resume to: DWS, At 
Anderson, Job # 8166444, 14( 
E. 300 S., SLC, VT 84111 


SENIOR PROGRAMMER/ANA. 
LYST to analyze, design, devel 
op, test and maintain application 
software systems using ASP. 
VB, ASP.NET, VB.NET, C#, SQL 
Server, Oracle, VB Script, Java 
Script, XML, XSLT, IIS, MTS 
HTML, DHTML, COM, DCOM 
Crystal Report and Active 
Reports under Windows NT. 
2000/2003 operating systems 
Require: Bachelor's degree (or 
equivalent) in Computer 
Science, a Scientific discipline 
or a closely related field with 2 
yrs of exp in the job offered 
Each 3 yrs of progressively 
responsible work exp in the field 
will be considered equivalent tc 
1 yr of college education 
Extensive travel on assignment 
to various client sites within the 
U.S.is required. Competitive 
salary offered. Send resume to 
Popular Tech, 14151 Newport 
Avenue, Suite 204, Tustin 
CA92780; Attn: JobNV 


OmniPros, a worldwide provider 
of software solutions seeks moti- 
vated Software Engineers 
Network Administrators/ Engin- 
eers, IT Analysts, and Business 
Development/Technical Op 
ations Management. Multiple 
Positions available in Cincinnati 
OH and San Jose, Ca. Please 
e-mail resume te 
careers@omnipros.com fax 
resume to 408-944-0719, or 
mail resume to: OmniPros Ltd 
99 W. Tasman Drive, Ste 205 
San Jose, CA 95134 


Software Professionals: RS 
Software, a leading globally pos- 
itioned software development 


and consulting firm needs pro- 
grammer/analysts, willing to re- 


locate at employer's expense to 
ts multinational clients nation- 


wide with exp. in the following 
skill mixes: COBOL, CICS, DB2 


QL Server, Turbo image, MPE- 
x on HP3000 platform C, C++ 


File-Aid, Xpeditor and Endeavor 


ating systems. Work with client 
management to identify and 


quirements and processes for 
modification of new and current 
software programs. Conduct 


end-user training and systems 
support. $66,780 yearly. Send 
n: Erlinda 


entify solutions for complex bus: 


iness technology systems and 


object-oriented systems. Con 
duct performance and model 
testing, report generation, trou 
bleshooting, debugging and 
coding. Participate in process 
design, end-user training and 
systems support. $66,780 year 
ly. Send resume to: DWS, Attn 
Erlinda Anderson, Job # 
8166441, 140 E. 300 S., SLC 
VT 84111 


Computer Scientist 


Responsible for performing ba- 
sic research in intelligent agent 
systems & applying the results 
to challenging real-world prob- 
lems. Responsibilities will in- 
clude managing maintenance & 
extension of existing BD! (Belief 
Desire Intention) agent software 
& leading research efforts in the 
area of robustness for agent 
systems. Requires PhD in com- 
puter science with doctorai re- 
search & dissertation emphasis 
in BDi agent systems plus five 
years experience in the applica- 
tion of BDI agent systems to 
real-world problems. Requires 
publication record in BDI sys- 
tems. Background must include 
theoretical foundations of BDI 
agent systems; programming in 
Prolog, Python, Java, and Lisp 
software engineering project 
leadership experience. This pos. 
ition is located in Menlo Park 
CA. Please appiy, indicating 
job# 2263, via our website @ 
www.sri.com or mailing address 
at 333 Ravenswood Ave, Menio 
Park, CA 94025. Attn: Employ 
ment Dept. EOE/AA 


SOFTWARE ENGINEER to 
design, develop, implement and 
test application software using 
Java, J2EE, JSP, WebLogic 
WebSphere, Tomcat, XML, RMI 
IRC, Serviets, Java Applets. 
Java Script, C and Oracle under 
Windows and UNIX operating 
systems. Require: M.S. degree 
in Computer Science/ an Eng- 
ineering discipline, or a closely 
related field with 1 yrs of exp in 
the job offered or as a Prog 
rammer/ Analyst, Extensive trav- 
el on assignments to various 
client sites within the U.S.is 
required. Competitive salary 
offered. Apply by resume to 
Sudhakara Ravoori Sai 
Technical Services, Inc., 626 
WendoverDrive. Ridgeland 
MS39157; Attn: JobSK 


Computer/Engineering 


We currently have an opportu- 
nity in Seattle, WA for VP of 
Engineering. Some travel re- 
quired. Bachelors in CS, Bus 
or related field & 8 years exec- 
utive level high-tech industry 
exp required. You may send a 
resume to Visto Corporation - 


mail to 
or by mail to Citrix Systems, inc 

851 W. Cypress Creek Road, Ft 
Lauderdale, FL 33309. Must ref. 
erence job code 28713 in sub. 


response. EEO/AA Employer 


SENIOR SOFTWARE ENGIN 
EER to lead a team in the des 
ign, development, testing, imple- 
mentation and support of inter 
net based financial applicatior 
software using C#, ASP.NET. 
XML, HTML, Java Script, ASP. 
Visual Basic, 11S, PL/SQL, Or 
acie, SQL Server, Crystal Re 
ports and Rational Rose under 
Windows 2000/NT, UNIX and 
DOS operating systems, Mentor 
and supervise junior engineers 
and programmers. Require 
B.S. degree in Computer Sci 
ence/Engineering, or a closely 
related field with 5 yrs of pro- 
gressively responsible exp in the 
job offered or as a Programmer: 
Systems Analyst. Competitive 
salary offered. Send resume to 
Cheryi Escobar, Harbor Pay. 
ments, Inc., 1900 Emery St. NW. 
2nd Floor, Atlanta, GA 30318 
Attn: Job PS 


SOFTWARE ENGINEER to 
design, develop, test and main 
tain computer software for vari 
ous business applications and 
eCommerce solutions using 
ASP, VB, SQL Server, Visua’ 
Interdev, JavaScript, DHTML 
HTML and CSS on Windows 
2000/NT platforms. Require 
M.S. degree in Computer 
Science, or a closely related 
field with 2 yrs of exp in the job 
offered or as a Programmer 
Analyst or Programmer, Exp 
erience gained before or after 
earning the degree will be 
accepted. Extensive travel on 
assignment to various client 
sites within the USis required 
Competitive salary offered 
Send resume to: Donna Marie 
Kurz American Computer 
Technologies, 2200 Lucien Way. 
Suite 195, Maitianc, FL32751 
Attn: Job RG 


SENIOR PROGRAMMER/ANA. 
LYST to analyze, design, devel 
Op, maintain and implement 
Oracle applications, focusing on 
HR, Payroll, Advance Benefits. 
OTL and Financial modules 
using PL/SQL, SQL lus 
SQL"LDR, Oracle, Developer 
2000 and SQL Server Req 
uire: B.S. degree in Computer 
Science/Engineering, or a close- 
ly related field with 2 yrs of exp 
in the job offered or as a 
Programmer. Extensive trave 


ect line of e-mail or in written 


Degree + 5 years of progressive 
professional experience in soft 


ware design and development 


All Positions require extensive 
travel and/or relocation, attrac 
tive compensation package 
Send Resume and Cover letter 
to: Human Resource Director. 
Optimum Technology Solutions. 
Inc., 111 Acklen Park Dr. Suite 
E105, Nashville, TN 37203 


SOFTWARE ENGINEER 
Lincroft, New Jersey to design 
mobility solution to achieve 
seamless switching of active 
calls. B.S. in Electrical E 
eering and two (2) years experi 
ence as System Engineer, Test 
engineer, Soft-ware Engineer or 
related position with experience 
using Linux and Windows CE 
VoIP using SIP signaling proto- 
col; PSTN analog trunk circuitry. 
WiFi and cellular GSM wireless 
technologies; DNS functionality 
DHCP server, and AAA enter. 
prise servers required 
Competitive salary and benefits. 
For prompt consideration 
please submit your resume/CV 
with the following codes includ: 
ed to D-COMPUTER 
16275BR, Avaya inc., P.O. Box 
188, Waltham 


SOFTWARE ENGINEER, Sen- 
jor Level (Yonkers, NY)-Ful 
Time. Develop application inter. 
face screen in ASP.NET code 
using GUI tools that execute 
complex VB.NET & JavaScript 
validation routines. Write T-SQL 
stored procedures according tc 
high level specification & design 
conventions. Build internet appli- 
cations in the medical care 
arena, moving from prototype to 
execution with support to 200+ 
sites. Supervise a team of 4 pro 
grammers. Bachelor's degree or 
equivalent in Comp. Sci, CiS 
MIS or reiated field req'd. 4 yrs 
exp. req'd. At least 2 of those 
years in healthcare IT industry. 
developing NET. Send CV to 
Emerging Health Information 
Technology, 3 Odell Piaza 
Yonkers, NY 10701, Fax 914 
457-6206, Attn: David Fletcher 


Place your 
Labor Certification 
ads here! 


you put together a 


that wil 


programming and test lab set up VC++, MFC, Oracle and OOAD 
including SW instailation, HW on embedded technology MVS 
configuration, and networking JCL, IMSDB, Fileaid, Xpeditor, 
computers. Apply with resume C, C++, Unix, COBOL, CICS 
by mail to DB2 and MQ Series on credit 

Vickie Olsen card applications Send resume 


ion assignments to various client 
sites within the U.S.is required. 


cost effectrve progr 
make this time-consuming 
task a little easier 


prototypes, including creating 
test procedures for debugging) 
test & documentation to MiL 
Specs; Project responsibility 
from start to finish. Pis. send 
resume to RF Products, inc 
Davis & Copewood Str. 
Camden, NJ 08103 (EEO/M/F) 


Staffing Manager, 220 West 
Mercer, Suite 300, Seattle, WA Competitive salary offered 
98119 Fax: (650) 622-9589 or Apply by resume to: SrinivasaR 
email your resume to Manne, Methodex Consulting 


Radiant Systems, Inc to: HR, RS Software (I) Ltd jobs@visto.com and specify Services, Inc., 1517 W. Irving 
3925 Brookside Parkway 1900 McCarthy Bivd, #103 JobiID#10.37.04J with your Bivd., Irving, TX75061; Attn: Job 
Alpharetta, Georgia 30022 Milpitas, CA 95035. submittal DP. 


Contact: Danielle Tetreault at: 
800-762- 2977 
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Telecom 


new services and address 
complaints about billing and 
poor network connections. 

care lot about SBC buy- 
ing AT&T, and it’s going 
matter ‘wait and see what 
since the planned 
layoffs happen right 
away,” said Cathleen Lilli, di- 
rector infrastructure ser- 
vices Konica Minolta Busi- 
ness Solutions USA Inc. 
Ramsey, N.J. One positive sign 
consistency, she said, that 


SBC announced that will not 


close down AT&T’s network 
operations center Bedmin- 
ster, 


Honoring Contracts 

January 2004, Konica Mi- 
nolta signed two-year, $2.7 
million contract with AT&T 
for IP-based virtual private 
network across U.S. loca- 


tions serving 4,500 workers. 
and CEO Edward 


also signed with AT&T for 
local and long-distance voice 
services that were formerly 
provided MCI and Sprint 
Corp. “So far, we’re happy 
with AT&T,” Lilli said. 

The contract includes 
option for third year. But 
SBC makes layoffs that affect 


entity will serve 


service for Konica Minolta, 
“that’s going out,” 
Lilli said, citing the terms 
her AT&T contract. “And SBC 
has honor that contract; 
that’s position.” 

IT managers at Fireman’s 


Fund Insurance Co. in Novato, 


Calif., plan meet with SBC 
this week over potential 
changes that could take place 
result the acquisition, 
said CIO Fred Matteson. 
Jan. 12, AT&T announced a 
five-year, $42 million contract 
with Fireman’s Fund for 
VPN that will support 4,500 
workers locations and 
replace voice and data net- 
works from multiple vendors. 
“My general evaluation 
that the SBC purchase makes 
sense,” Matteson said, noting 
that the combination SBC’s 


size and AT&T’s reputation for 


providing good network ser- 
vices to corporate customers 
should benefit the 
merged company. 

SBC Chairman 


Whitacre Jr. and 
David Dorman, 
his counterpart 
sought 
ensure corporate 
customers that 
the combined 


their interests, saying during 
press briefing that will have 
greater financial, technical 
and marketing resources. 

But some current customers 


blasted both companies for 


poor customer service. 

“SBC horrible. can't 
get away from them fast 
enough,” said Peter Schwei, 
telecommunications supervi- 
sor Charter Steel Inc. 
Saukville, Wis. Schwei said 
the steel producer about 
announce voice and data 
contract with another carrier, 
after years experiencing al- 
most monthly outages its 
facilities and frequent billing 
irregularities with SBC. 

telecom manager Mid- 


western distribution company 


said she had been working 


address SBC-related outage 


until a.m. the night before 
SBC announced that was 


buying AT&T. Maybe AT&T 


SBC 

horrible. 
can’t get 
away from them 
fast enough. 


PETER SCHWEI, TELECOM- 
MUNICATIONS SUPERVISOR 
CHARTER STEEL INC 


can improve 
SBC’s poor cus- 
tomer relations 
handling outages, 
suggested the 
manager, who 
asked not 
named. 

But Tim Cle- 
ment, telecom- 
munications 
analyst Maine 


Merger Highlights 


stock-swap transaction currently 


about $16 billion. 


Edward Whitacre Jr., 
chairman and CEO, 
will retain those positions after 


the acquisition 


AT&T Chairman and CEO 
David Dorman wil! become 
president of the combined 
company. 


More than 12,000 layoffs 
are expected, top 7,000 
already planned SBC this 
year and 12,500 cuts 
nounced AT&T. 


Required approvals from 
various federal, state and 
international bodies will likely 
take year secure 


Medical Center Portland, 
said thinks SBC could only 
improve AT&T’s customer 
service record. can’t imag- 
ine that could possibly 
more difficult than now 


trying get anything done 
with AT&T,” Clement said. 


“If not working, 
like circuit, it’s extremely 


difficult get anybody 
AT&T help.” 


Network capacity plen- 


tiful that consolidation among 
carriers inevitable, several 
network managers said. 

“Fewer competitors means 
less choice,” said Davidson 
Scott, vice president infra- 
structure Michael Baker 
Corp., global engineering 
and energy firm Moon 
Township, Pa. “However, tech- 
nology marches on, and op- 
tions always emerge. 
AT&T will not able take 
customers for granted.” 

The view from network 
managers Europe that 
SBC not all well known 
there and that the combined 
entity would well hold 
the globally recognized 
Sutherland, chairman the 
International Telecommunica- 
tions Users Group in Brussels. 
“Outside the U.S.A., SBC has 
very, very low brand recogni- 
tion. Now, retains AT&T 
branding, values and the like, 
then could well continue, es- 
pecially more money in- 
vested,” he said. 

IT managers in Europe 
and elsewhere felt burned 
SBC’s move the late 1990s 
invest network operators 
Denmark, Belgium and South 
Africa only eliminate re- 


duce its involvement last year, 


Sutherland said. 52377 


Users Advised Review Contracts, Consider Alternatives 


CORPORATE USERS need 
assess their contracts with net- 
work services providers and 
make plans for coping with the 
long-term consolidation 

the telecommunications industry, 
several industry experts said 

last week. 

“Enterprise customers need 
pay more attention 
tory processes than the past 
because the competitive forces 
that have protected them will 
weakened,” said Colleen 
Boothby, attorney Levine, 


Blaszak, Block Boothby LLP 
Washington. 

firm tracks 
Communications Commission 
procedures affecting network op- 
erators and represents large 
companies contract negotia- 
tions with the carriers. also 
works with group very 
large corporations called the 
Hoc Telecommunications 
Users Committee 

With former Bell oper- 
ating companies (RBOC) such 
SBC now entering the business 


lona-distance market, “there are 
all kinds opportunities for mis- 
chief,” Boothby said. The RBOCs 
know how play this 
market, don’t have the account 
teams and support and are not 
good contract terms,” she 
asseried. 

Boothby said she worries 
that vendors regulated 
closely, they “will revert back 
the practices the 1980s,” 
when customers often were 
told that they could obtain new 
network services only they 


single 
Microfilms Inc., 300 N. Z 
tered with the Copyright Cle 
mission to reprint may be 
www uyer.com. E 
$250 per year. Europe 


bought telecommunications 
equipment from the carrier they 
had chosen 


Team Concerns 
For now, the top concern for 
users what might happer 
their account teams, said Jim 
another attorney the 
law firm. “Users need gird 
themselves for the possibility that 
current teams change and 
shrink,” Blaszak said. 

Even company has con- 
tract that limits its carrier's ability 


downsize the account team, 
employees assigned the team 
could still laid off, Boothby 
added. “If people are laid off 
laid off,” she said. “So 
what good does the contract lan- 
guage 

Network managers should look 
closer than ever switching 
carriers the U.S. and 
international markets, said 
Gartner Inc. analyst Eric Paulak. 
Users also may want evaluate 
the idea hiring systems in- 
tegrator manage all their 
voice and data network services, 
he added 
Matt Hamblen 
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BACK 


FRANK HAYES FRANKLY SPEAKING 


Ray’s Return 


NOORDA BACK. Dec. 17, the man who built 

Novell fired his trusted protégé, Ralph Yarro, for pock- 

eting upward $20 million from “self-dealing trans- 

actions” Noorda’s investment company, The Canopy 

Group. Noorda replaced Yarro and took control again 
the venture capital firm founded and funded. 

Think this some obscure industry sideshow? Think again. Yarro 
was the architect The SCO Group’s assault Linux and its cor- 
porate users. Yarro used his position turn Noorda-funded Linux 
start-up named Caldera into the anti-Linux litigation machine SCO. 

But now Ray back, and Yarro gone. And that what? 


For Noorda, means return the spot- 
light. Until the mid-1990s, was true in- 
dustry heavyweight, the man who grew Novell 
from little Utah company into powerhouse. 
Novell’s NetWare was the LAN operating sys- 
tem that helped PCs gain foothold corpo- 
rate IT. 

Then Noorda decided after Microsoft 
head-on. Novell CEO, bought Unix from 
AT&T and added WordPerfect and Quattro Pro 
compete with Word and Excel. That made 
Novell’s board nervous, and pushed the ag- 
gressive Noorda out 1994. was 70. 

didn’t exactly slow down. Noorda had al- 
ready earmarked his billion-dollar fortune for 
charity after died. became venture capi- 
talist make the pile even bigger. His invest- 
ments Utah high-tech start-ups did well. 

One those bets was Linux 1995, when 
Noorda start-up called Caldera launched 
early commercial Linux distribution. 

And 1996, Noorda bankrolled lawsuit ac- 
cusing Microsoft unfair competition against 
MS-DOS competitor named DR-DOS. 
Microsoft eventually paid $275 mil- 
lion settle the case. 

Finally, 1998, Noorda stepped 
away, handing over day-to-day con- 
trol Canopy Yarro. That’s 
when things got ugly. 

According lawsuit filed 
Noorda and Canopy January, 
Noorda trusted Yarro what 
was right for Canopy and the chari- 


proper bonuses and more than $100 million 
stock options. Noorda wants that money back. 

Yarro has filed his own lawsuit, claiming that 
2003 Noorda’s memory and health were bad 
and “became incapacitated and/or subject 
undue influences.” says Noorda was manip- 
ulated into firing him Yarro’s rivals, includ- 
ing Noorda’s daughter. Yarro and his associates 
want their jobs back, plus $100 million, and they 
want Noorda kicked off his own board. 

But for now, Yarro’s the one out 
Canopy. He’s still SCO Group chairman, but 
that may last only until Canopy offers new 
slate directors. 

What about Noorda? really out it? 
That’s tough buy. was just few years ago 
that Computerworld reporter caught with 
Noorda, hoping get comment Micro- 
soft’s antitrust troubles. She didn’t get the 
quote. But when she mentioned passing that 
she needed new car, Noorda who also 
owned string auto dealerships was sharp 
enough turn the interview into sales pitch. 

That’s Ray: hardheaded, aggressive, cagey, his 
eye always the customer. 

when takes control 
SCO’s Linux litigation, can 
pretty sure one set lawsuits will 
away almost immediately: the 
ones aimed corporate Linux 
users. 80, Noorda may have lost 
step. But never far 
gone that think it’s good idea 
to sue his own customers. 


www.computerworld.com 


Hard Problems, Easy Solutions 


This classified research lab essentially steel vault 
with electric doors. “Power was lost one 
the backup generator failed, and people 
the lab were trapped utter darkness for long hour,” 
says pilot fish there. investigation that the 


generator was never tested, 


moves 


quickly make sure the incident never repeated: 
“Within week,” fish reports, “every employee the 
project was issued glow-in-the-dark light stick.” 


Aha! everything else 
Attorney calls ARK sent india. 
his firm’s help When got 
desk, complain- TAN back 
ing that the desk, started 
sound sending out résumés.” 
the bottom his screen, Support pilot fish needs 
turned up,” pilot fish the newly instalied com- 
through some more structs trainee ask 
settings the Control admins open 
Panel for sound volume. Port 3456, https out- 
setting called ‘speaker Port thres, four, five, six, 
asked him https fish 
what that was set says. Phone rings 
said, ‘Sixty percent minutes later. you 
so. But you know, want Ports 
have and opened, and why? 
asks admin. 
Details, Details When trainee returns, 
bought much bigger firewall guy asked 
outfit, and figures wanted 3456 out- 
great new opportunity going, specifically 
until the new boss told him no, really 
meeting. “First talked 
about how his company WYSIWYG 
had stateside New user swears she 
opers when was knows her password but 
bought the new in. try her 
ent firm,” fish says. password and log right 
“Most the speech was in, ask her try 
about how they again,” support pilot fish 
going streamline the says. “Then notice that 
company make she says each letter, 
more competitive. hitting the asterisk 


end his speech, ca- 


key. Turns out she 


sually mentioned how watched other people 
they only have five state- log and could only see 
side developers stars, that’s what she 
prototyping work, tried over and over.” 


SHARKY: Send your true 


ties would someday feed. Instead, 
over the next six years, Yarro grant- 
himself and two associates most 
Canopy’s stock, along with more 
than $20 million allegedly im- 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes®@computerworld.com. 


And the suits against Novell, Red 
Hat and IBM? For now, there’s 
telling. But old hardheaded, ag- 
gressive, cagey Ray really back, 
we'll soon find out. 52364 


snag snappy Shark shirt use it. And check out the daily 
feed, browse the Sharkives and sign for Shark Tank 
home delivery 
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